A quieter week but still some good content!
Another great post from the WatchTowr team: XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748).
An excellent write-up for an Intigriti's CTF challenge with 3 ways to solve it (2 unintended and the intended one): Intigriti 0325 Challenge Writeup.