Latest Insights

Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn

October 08, 2026
Dustin Childs

Read Full Article
Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading
October 31, 2022

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

CVE-2021-44790: Code Execution on Apache via an Integer Underflow
January 25, 2022

CVE-2021-44790: Code Execution on Apache via an Integer Underflow

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor
December 18, 2021

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

CVE-2021-25646: Getting Code Execution on Apache Druid
March 29, 2021

CVE-2021-25646: Getting Code Execution on Apache Druid

CVE-2019-0230: Apache Struts OGNL Remote Code Execution
October 07, 2020

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data
September 16, 2020

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch
December 19, 2017

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch