Skip to main content

One post tagged with "Bug Bounty"

View All Tags

CVE-2025-27610: Local file inclusion

· 2 min read

After collecting a fair number of CVEs, I realized that having a CVE isn’t really that big of a deal—unless it’s a major one (or comes with a juicy bug bounty 😏). So I figured, why not challenge myself with a CVE that’s not from a giant like Microsoft or Google, but still big enough to push my limits a bit? That’s when I started hunting for a target with a few friends, just for fun. Then I thought—why not go for something a little off the beaten path?

That’s how I ended up looking into languages I hadn’t really touched much before, like Ruby, Rust, and Go. After some digging, I stumbled upon Rack—a Ruby interface that connects web servers with Ruby web applications.