Haitam Lazaar (lazaarsec) - Research & Advisories

CVE-2026-100310: Local Privilege Escalation via LIBEXTRACTOR_PREFIX Untrusted Search Path

Fri, 25 Sep 2026 00:00:00 GMT

Security advisory for CVE-2026-100310 (GNU Project libextractor (< 1.16)). CVSS: 7.3

CVE-2026-91752: Stack Overflow via Excessive Stack Allocation in OLE2 Plugin

Mon, 14 Sep 2026 00:00:00 GMT

Security advisory for CVE-2026-91752 (GNU Project libextractor (< 1.15)). CVSS: 8.7

How I Bypassed an API Key Validation with a Single Boolean (true) — A PHP Type Juggling Case Study

Sat, 08 Aug 2026 00:00:00 GMT

A deep dive into CVE-2026-16269: How loose comparison (==) combined with JSON typed deserialization allowed unauthenticated API key bypass with a single boolean true, and how to defend against dynamic type confusion.

CVE-2026-15237: Unauthenticated Payment Record Creation via Checkout REST Endpoint

Thu, 06 Aug 2026 00:00:00 GMT

Security advisory for CVE-2026-15237 (MotoPress Hotel Booking Lite (< 6.2.3)). CVSS: 5.3

CVE-2026-15238: Subscriber+ Customer Data Modification via IDOR

Thu, 06 Aug 2026 00:00:00 GMT

Security advisory for CVE-2026-15238 (MotoPress Hotel Booking Lite (< 6.2.3)). CVSS: 5.4

CVE-2026-16269: Unauthenticated API Authentication Bypass via Type Juggling

Mon, 03 Aug 2026 00:00:00 GMT

Security advisory for CVE-2026-16269 (Tribulant Newsletters (< 4.16)). CVSS: 4.8

CVE-2026-12251: Unauthenticated Privilege Escalation via Role Selection Field

Tue, 14 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-12251 (Ultimate Member Ultimate Member (< 2.12.1)). CVSS: 8.1

CVE-2026-13178: Unauthenticated Payment Bypass via Order Status Manipulation

Mon, 13 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-13178 (Themewinter Eventin (< 4.1.16)). CVSS: undefined

CVE-2026-14843: Unauthenticated Person Data Modification via IDOR

Mon, 13 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-14843 (Events Made Easy Events Made Easy (< 3.1.4)). CVSS: 5.3

CVE-2026-12097: Unauthenticated Plugin Settings Modification

Tue, 07 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-12097 (User Management User Management (<= 1.2)). CVSS: 5.3

CVE-2026-14842: Unauthenticated Payment Bypass via Token Detachment

Tue, 07 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-14842 (Events Made Easy Events Made Easy (< 3.1.2)). CVSS: undefined

CVE-2026-13390: Unauthenticated Event Aggregator Import Status Manipulation

Mon, 06 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-13390 (The Events Calendar The Events Calendar (< 6.16.5.1)). CVSS: 5.3

CVE-2026-12968: Unauthenticated Stored XSS via Arbitrary SVG Upload

Wed, 01 Jul 2026 00:00:00 GMT

Security advisory for CVE-2026-12968 (Product Addons Product Addons – WowAddons (< 1.6.15)). CVSS: 8.8

Time is Not a Secret: How Predictable Tokens Lead to Registration Bypasses (CVE-2026-10530)

Sat, 06 Jun 2026 00:00:00 GMT

Deconstructing an unauthenticated account verification bypass in WordPress Pie Register (<= 3.8.4.9) caused by deterministic md5(time()) token generation, server-timing reconnaissance, and entropy analysis.

CVE-2026-10820: Subscriber+ Subscription Cancellation via IDOR

Sat, 06 Jun 2026 00:00:00 GMT

Security advisory for CVE-2026-10820 (ProfilePress ProfilePress (< 4.16.17)). CVSS: 8.1

CVE-2026-10531: Contributor+ Stored XSS via Shortcode Attribute

Wed, 03 Jun 2026 00:00:00 GMT

Security advisory for CVE-2026-10531 (AI Share & Summarize AI Share & Summarize (< 2.0.4)). CVSS: 6.8

CVE-2026-10530: Email Verification Bypass via Predictable Token

Mon, 01 Jun 2026 00:00:00 GMT

Security advisory for CVE-2026-10530 (Pie Register Pie Register (<= 3.8.4.9)). CVSS: 5.3

I Tested a 1950s Algorithm Against Modern Network Attacks. Here's What Surprised Me.

Thu, 07 May 2026 00:00:00 GMT

Benchmarking 1958 Logistic Regression against 25,000 network intrusion flows (NSL-KDD), uncovering how PCA dimensionality reduction jumped AUC by +0.10, and running red team payloads including Slowloris and reverse shells against ML detection models.

Stop Trusting Your App: How to Implement 'Zero Trust' Directly in SQL Server

Mon, 23 Feb 2026 00:00:00 GMT

A technical blueprint on moving defense-in-depth directly into database schemas using T-SQL firewalls, strict RBAC, filtered conditional unique constraints, and physical isolation across a distributed multi-OS network.