CVE-2026-25860: OpenClinic GA reflected XSS to RCE
Vulnerability research on OpenClinic GA, covering reflected XSS impact and exploitation path.
partywavesec: CVE disclosures, vulnerability research, and write-ups
Welcome to partywavesec, a cybersecurity blog focused on in-depth write-ups on cyber challenges, CVE disclosures, and security research topics. Everything written very calmly and without pretence, like the rhythm of water.
Featured security research
CVE-2025-55816: HotelDruid XSS and account takeover risk
Analysis of a HotelDruid vulnerability affecting session security and user compromise.
CVE-2024-42845: InVesalius DICOM RCE analysis
Medical software security research involving DICOM parsing and remote code execution risk.
Featured writeups
Cyber Apocalypse Forensics challenges from very easy to insane
Detailed writeup for every forensics challenge in Hack The Box 2025 cyber-apocalyse competition
Easy HackTheBox Linux Machine Code.
Step by step solution for the easy linux boot-to-root machine Code.
