<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <id>https://www.acylia.com/blog/</id>
    <title>Acylia</title>
    <updated>2026-01-24T00:00:00.000Z</updated>
    <generator>acylia.com</generator>
    <link rel="alternate" href="https://www.acylia.com/blog/"/>
    <link rel="self" href="https://www.acylia.com/atom.xml"/>
    <subtitle>Acylia's cybersecurity blog</subtitle>
    <logo>https://www.acylia.com/acylia-light.svg</logo>
    <icon>https://www.acylia.com/favicon.ico</icon>
    <rights>Copyright (c) 2023-present, Acylia</rights>
    <entry>
        <title type="html"><![CDATA[Vulnerability Disclosure - MISP 2.5.2]]></title>
        <id>https://www.acylia.com/blog/posts/disclosure-misp-2.5.2</id>
        <link href="https://www.acylia.com/blog/posts/disclosure-misp-2.5.2"/>
        <updated>2026-01-24T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Exploiting PHP filter chains error-based oracle to gain arbitrary file read in MISP 2.5.2.]]></summary>
        <author>
            <name>Ianis BERNARD</name>
        </author>
    </entry>
    <entry>
        <title type="html"><![CDATA[Vulnerability Disclosure - js-yaml 3.14.0]]></title>
        <id>https://www.acylia.com/blog/posts/disclosure-js-yaml-3.14.0</id>
        <link href="https://www.acylia.com/blog/posts/disclosure-js-yaml-3.14.0"/>
        <updated>2025-01-06T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Exploiting insecure YAML deserialization with JavaScript to gain remote code execution in js-yaml 3.14.0.]]></summary>
        <author>
            <name>Ianis BERNARD</name>
        </author>
    </entry>
    <entry>
        <title type="html"><![CDATA[Vulnerability Disclosure - MISP 2.4.155]]></title>
        <id>https://www.acylia.com/blog/posts/disclosure-misp-2.4.155</id>
        <link href="https://www.acylia.com/blog/posts/disclosure-misp-2.4.155"/>
        <updated>2024-05-07T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Exploiting insecure PHAR deserialization via CakePHP request parameters spoofing to gain remote code execution in MISP 2.4.155.]]></summary>
        <author>
            <name>Ianis BERNARD</name>
        </author>
    </entry>
</feed>