https://wearethebug.dev/tags/craft-cms/Recent content on WE ARE THE BUGTradecraften-usSun, 27 Sep 2026 00:00:00 +0000https://wearethebug.dev/posts/htb-layover/Sun, 27 Sep 2026 00:00:00 +0000https://wearethebug.dev/posts/htb-layover/Layover is a Medium-rated Linux machine that chains WiFi traffic sniffing and CMS RCE to pivot from a contractor foothold into a web portal's internal secrets, landing user access via password reuse. Root falls to a local CUPS vulnerability that leaks an admin token, used to write privileged files and fully compromise the box.