Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Loading up a pair of Qt bugs: Detailing CVE-2019-1636 and CVE-2019-6739
April 03, 2019

Loading up a pair of Qt bugs: Detailing CVE-2019-1636 and CVE-2019-6739

Pwn2Own Vancouver 2019 - The Schedule and Live Results
March 20, 2019

Pwn2Own Vancouver 2019 - The Schedule and Live Results

The Apple Bug That Fell Near The WebKit Tree
March 14, 2019

The Apple Bug That Fell Near The WebKit Tree

CVE-2019-0604: Details of a Microsoft SharePoint RCE Vulnerability
March 13, 2019

CVE-2019-0604: Details of a Microsoft SharePoint RCE Vulnerability

(Web)Access (Un)Control
March 07, 2019

(Web)Access (Un)Control

Finding Unicorns: When the C++ Compiler Writes the Vuln
February 28, 2019

Finding Unicorns: When the C++ Compiler Writes the Vuln

Using the Weblinks API to Reach JavaScript UAFs in Adobe Reader
February 06, 2019

Using the Weblinks API to Reach JavaScript UAFs in Adobe Reader

Implementing Fuzz Logics with Dharma
January 31, 2019

Implementing Fuzz Logics with Dharma

Pwn2Own Vancouver 2019: Tesla, VMware, Microsoft, and More
January 14, 2019

Pwn2Own Vancouver 2019: Tesla, VMware, Microsoft, and More

ZDI-18-1372 – The Elegant Bypass
December 21, 2018

ZDI-18-1372 – The Elegant Bypass