https://jcdematos.com/tags/library-hijack/ Recent content in Library Hijack on Jc de Matos Hugo en Sat, 12 Sep 2026 00:00:00 +0000 https://jcdematos.com/writeups/calc/ Sat, 12 Sep 2026 00:00:00 +0000 https://jcdematos.com/writeups/calc/ Command injection via a PHP eval() in a calculator endpoint, leading to RCE, credential reuse for a user shell, and root through a writable Python library hijack.