Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface
June 07, 2018

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface

Malicious Intent using Adobe Acrobat's OCG setIntent
May 29, 2018

Malicious Intent using Adobe Acrobat's OCG setIntent

It’s Time to Terminate the Terminator
May 15, 2018

It’s Time to Terminate the Terminator

Running with Scissors: The Dangers of Cutting and Pasting Sample Code
May 02, 2018

Running with Scissors: The Dangers of Cutting and Pasting Sample Code

When Java throws you a Lemon, make Limenade: Sandbox escape by type confusion
April 25, 2018

When Java throws you a Lemon, make Limenade: Sandbox escape by type confusion

Inverting Your Assumptions: A Guide to JIT Comparisons
April 12, 2018

Inverting Your Assumptions: A Guide to JIT Comparisons

Tales from HallwayCon – Busting Myths Over Adult Beverages
March 29, 2018

Tales from HallwayCon – Busting Myths Over Adult Beverages

Testing for Truthiness: Exploiting Improper Checks
March 09, 2018

Testing for Truthiness: Exploiting Improper Checks

VMware Exploitation through Uninitialized Buffers
March 01, 2018

VMware Exploitation through Uninitialized Buffers

Pushing WebKit's Buttons with a Mobile Pwn2Own Exploit
February 12, 2018

Pushing WebKit's Buttons with a Mobile Pwn2Own Exploit