Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Onix: Finding Pokémon in your Acrobat (Revealing a new attack surface)
October 02, 2018

Onix: Finding Pokémon in your Acrobat (Revealing a new attack surface)

CVE-2018-15421 – Examining a Stack-based Overflow in the Cisco Webex Network Recording Player
September 27, 2018

CVE-2018-15421 – Examining a Stack-based Overflow in the Cisco Webex Network Recording Player

CVE-2018-12794: Using Type Confusion to Get Code Execution in Adobe Reader
September 18, 2018

CVE-2018-12794: Using Type Confusion to Get Code Execution in Adobe Reader

Pivot! PIVOT! – Reaching Unreachable Vulnerable Code in Industrial IoT Platforms
September 13, 2018

Pivot! PIVOT! – Reaching Unreachable Vulnerable Code in Industrial IoT Platforms

VirtualBox 3D Acceleration: An accelerated attack surface
August 29, 2018

VirtualBox 3D Acceleration: An accelerated attack surface

Floating-Poison Math in Chakra
August 22, 2018

Floating-Poison Math in Chakra

Throwing Shade: Analysis of a Foxit Integer Overflow
August 01, 2018

Throwing Shade: Analysis of a Foxit Integer Overflow

Analyzing an Integer Overflow in Bitdefender AV: Part 2 – The Exploit
June 21, 2018

Analyzing an Integer Overflow in Bitdefender AV: Part 2 – The Exploit

Analyzing an Integer Overflow in Bitdefender AV: Part 1 – The Vulnerability
June 19, 2018

Analyzing an Integer Overflow in Bitdefender AV: Part 1 – The Vulnerability

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface
June 07, 2018

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface