cornellcyber/blog_
Featured
CVE Request: Path Traversal in python-dateutil rrulestr() TZID Parameter
Alexander Schneider
22 March, 2026
22 March, 2026
python-dateutil <= 2.9.0.post0 allows path traversal via unsanitized TZID values in rrulestr(), enabling arbitrary file reads and file existence disclosure.
Cornell Spring Mini CTF Writeups
Bill Nguyen
1 February, 2026
1 February, 2026
Spring '26 Cornell CTF Writeup
Archive
Brick City Office Space Writeup - UMassCTF 2026
Liam DeMong, Audrey Holden
12 April, 2026
12 April, 2026
Brick City Office Space Writeup from UMassCTF 2026
CVE Request: Path Traversal in python-dateutil rrulestr() TZID Parameter
Alexander Schneider
22 March, 2026
22 March, 2026
python-dateutil <= 2.9.0.post0 allows path traversal via unsanitized TZID values in rrulestr(), enabling arbitrary file reads and file existence disclosure.
Intro to OSINT & Geolocation 1
Hendry Xu
18 Feburary, 2026
18 Feburary, 2026
Introduction to open source intelligence (OSINT) and geolocation challenges
Cornell Spring Mini CTF Writeups
Bill Nguyen
1 February, 2026
1 February, 2026
Spring '26 Cornell CTF Writeup
Environment Setup for Beginners
Jakob Nacanaynay
22 June, 2025
22 June, 2025
Just run Linux!
Cryptography 1
Jakob Nacanaynay, Claude AI
14 March, 2025
14 March, 2025
test your understanding of encryption, decryption, hashing, and related security concepts
Forensics 1
Jakob Nacanaynay, Bill Nguyen, Parth Mittal, Claude AI
6 March, 2025
6 March, 2025
discover hidden information within files, systems, or data