en - Yokai Research by Hakai Offensive Security (Page 2)

Research Blog 05.05.26

[EN] CVE-2026-33725: Technical Analysis and Proof of Concept

On March 24, 2026, a high-criticality vulnerability was identified in Metabase Enterprise leading to remote command execution, discovered by "Hacktron AI and

Research Blog 01.04.26

Chupabase: Extracting Data from Misconfigured Lovable Applications

Abstract Applications developed with vibe coding platforms are significantly lowering the barrier to entry for software creation. Tools like Lovable allow users to build

Research Blog 17.03.26

CVE-2026-25769: RCE via insecure deserialization in wazuh cluster - remote command execution through cluster protocol

Abstract In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.

Research Blog 06.03.26

[EN] Deep Looking into Centreon

Summary In this research, three critical vulnerabilities were identified in Centreon Web and the Centreon Open Tickets module, allowing everything from full database extraction

Research Blog 27.02.26

[EN] DNS Query Detection via Direct Packet Inspection

With knowledge of how operating systems work, it is known that common systems are composed of a kernel (the central part of the system

Research Blog 13.02.26

[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration

With the widespread adoption of workflow automation platforms in corporate environments, these solutions have come to play a critical role in system integration and

Research Blog 04.02.26

[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing

Your automation script or pentest tool works perfectly in the lab. Requests flow, data returns. But the moment you hit the real target, the

Research Blog 15.01.26

[EN] A Deep Dive into KeyTabExtractor Techniques

By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed

Research Blog 11.12.25

[EN] N8Naked: exploring security misconfigurations in N8N

Por: Lucas William ,Lucas Hoffmann e Thiago Bispo Introduction In the second half of 2025, the Hakai DevSec team carried out an incursion into