https://uukelele.is-a.dev/I build things, break them, write about it, and sometimes find CVEs along the way.Fri, 31 Jul 2026 10:45:15 +0000https://uukelele.is-a.dev/articles/opencode-rce/https://uukelele.is-a.dev/articles/opencode-rce/Tue, 14 Jul 2026 00:00:00 +0000It's me trying to get an unassuming `opencode` command to execute an arbitrary command from a server.https://uukelele.is-a.dev/articles/test/https://uukelele.is-a.dev/articles/test/Thu, 09 Jul 2026 00:00:00 +0000[Taken from vale.rocks] A page for testing and trialing formatting, features, and typography by seeing how they interact in complex arrangements to catch edge cases at scale.https://uukelele.is-a.dev/articles/folium/https://uukelele.is-a.dev/articles/folium/Tue, 07 Jul 2026 00:00:00 +0000Note I'm just writing this in Kate right now in an Untitled markdown file so that once the migration is complete I can finally save it to my new blog. My blog originally ran on Zensical using GitHub Pages for hosting. Well... times have gone by. I still really like Zensical but Ihttps://uukelele.is-a.dev/articles/gh-md/https://uukelele.is-a.dev/articles/gh-md/Mon, 18 May 2026 00:00:00 +0000A project I made to simplify making a GitHub profile README. Although it is kinda opinionated. Just saying.https://uukelele.is-a.dev/articles/open-webui-xss/https://uukelele.is-a.dev/articles/open-webui-xss/Sat, 16 May 2026 00:00:00 +0000SPOILER: I didn't get an XSS here. Only a CSS injection. Also, it's kinda in #projects because it involves my project Human Harness.https://uukelele.is-a.dev/articles/fuse-stack/https://uukelele.is-a.dev/articles/fuse-stack/Wed, 22 Apr 2026 00:00:00 +0000Basically an advertisement for some tech stack I built. It's very broken and the post reads a *lot* like AI. I don't recommend reading this.https://uukelele.is-a.dev/articles/flat-file-databases/https://uukelele.is-a.dev/articles/flat-file-databases/Thu, 19 Mar 2026 00:00:00 +0000A rant about flat-file databases. Well, more specifically, about the infuriatingly incorrect ways that they are taught to students.https://uukelele.is-a.dev/articles/tiangolo/https://uukelele.is-a.dev/articles/tiangolo/Thu, 19 Mar 2026 00:00:00 +0000Slightly outdated. Basically me just glazing @tiangolohttps://uukelele.is-a.dev/articles/wow-data-leak/https://uukelele.is-a.dev/articles/wow-data-leak/Thu, 19 Mar 2026 00:00:00 +0000Merely minutes after launch, I discovered a critical flaw in the world of walker site, that could leak any user's full name, email address, country, and date of birth - simply from their walker ID.