CVE-2026-48908
2026Passive security checker for an unauthenticated file upload vulnerability affecting the SP Page Builder extension for Joomla.
YORA1928
Cybersecurity·Networking·Linux·Servers
Learning systems by building, testing, and documenting them.
01 / About
Understanding systems by working with them
I'm an IT student interested in understanding how computer systems work. My main areas of interest are networking, cybersecurity, Linux, and server administration.
Most of what I learn comes from hands-on work: building small labs, configuring systems, testing ideas, investigating problems, and documenting the results.
I'm still learning, and that's intentional. This website is a record of that process.
Current Focus
Networking
TCP/IP, DNS, DHCP, routing, and troubleshooting through lab experiments.
Cybersecurity
Security fundamentals, vulnerability research, and authorized testing.
Linux
System administration, permissions, SSH, and service management.
Servers
VPS management, Docker, deployment, and server configuration.
Vulnerability Research
CVE analysis, proof-of-concept development, and responsible disclosure.
02 / Research
Security research & vulnerability analysis
CVE-2026-15748
2026Scanner for a critical unauthenticated file upload vulnerability in the Forminator plugin for WordPress affecting versions up to 1.56.1.
Research tooling for two chained PaperCut vulnerabilities: CVE-2026-81578 (authentication bypass) and CVE-2026-82078 (unsafe class loading).
03 / Projects
Tools built while learning
Python tool that identifies SP Page Builder on Joomla sites, estimates the version, and checks whether the upload feature is accessible without authentication.
Python-based scanner that identifies WordPress installations using the Forminator plugin and assesses version-related exposure through passive checks.
Non-destructive vulnerability assessment tool for PaperCut NG/MF servers, covering two CVEs with fingerprinting and indicator-based checks.
04 / Writing
Technical writing
A personal account of how working with Linux servers led to an interest in cybersecurity and hands-on security learning.
05 / Recognition
Security acknowledgements
Vulnerability reports acknowledged by organizations in 2026. Full details are available in the certifications archive.
SMK Negeri 1 Bukateja
Security vulnerability reporting — upload web shell vulnerability affecting the BKK website.
RSU Islam Klaten
Security vulnerability reporting — web security issue identified and reported responsibly.
SMK Negeri 1 Jogonalan
Security vulnerability contribution — discovery and responsible reporting of a library website issue.