gabriel rodrigues - Yokai Research by Hakai Offensive Security

Research Blog 27.08.26

[PT-BR] CVE-2026-40083: SQL Injection no Cacti

Resumo A equipe de pesquisa Yokai, da Hakai Security, identificou uma vulnerabilidade de Injeção de SQL nas versões do Cacti <= 1.2.30.

Research Blog 27.08.26

[EN] CVE-2026-40083: SQL Injection in Cacti

Summary The Yokai research team, from Hakai Security, identified a SQL Injection vulnerability in Cacti versions <= 1.2.30. The flaw allows an

Research Blog 05.06.26

[EN] CVE-2026-44706: SQL Injection in Chatwoot FilterService

Summary The Hakai Security Research Team has identified a critical SQL Injection vulnerability in Chatwoot versions <= 4.11.1 that allows any authenticated

Research Blog 05.06.26

[PT-BR] CVE-2026-44706: SQL Injection in Chatwoot FilterService

Resumo A Equipe de Pesquisa da Hakai identificou uma vulnerabilidade crítica de Injeção de SQL nas versões do Chatwoot <= 4.11.1 que

Research Blog 13.05.26

[PT-BR] CVE-2026-4802: Command execution on Cockpit

Foi identificada uma vulnerabilidade de injeção de comandos no Cockpit, descoberta pelo time de Research da Hakai. A falha permite que um usuário autenticado,

Research Blog 17.03.26

CVE-2026-25769: RCE via insecure deserialization in wazuh cluster - remote command execution through cluster protocol

Abstract In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.

Research Blog 06.03.26

[PT-BR] Deep Looking into Centreon

Introdução Nesta pesquisa, foi identificada três vulnerabilidades críticas no Centreon Web e no módulo Centreon Open Tickets, que permitem desde a extração completa do

Research Blog 06.03.26

[EN] Deep Looking into Centreon

Summary In this research, three critical vulnerabilities were identified in Centreon Web and the Centreon Open Tickets module, allowing everything from full database extraction