Latest Insights CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft October 27, 2026 Bobby Gould Read Full Article July 01, 2019 The Left Branch Less Travelled: A Story of a Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox Research June 20, 2019 Remote Code Execution via Ruby on Rails Active Storage Insecure Deserialization Ruby on Rails Research Exploit June 11, 2019 Exploiting the Windows Task Scheduler Through CVE-2019-1069 Microsoft Exploit Research May 21, 2019 RCE Without Native Code: Exploitation of a Write-What-Where in Internet Explorer Microsoft Internet Explorer Research May 13, 2019 Updates and Enhancements to the Targeted Incentive Program TIP Program News Research May 07, 2019 Taking Control of VMware Through the Universal Host Controller Interface: Part 1 VMware Pwn2Own Research April 25, 2019 CVE-2019-0726: An RCE Vulnerability in the Windows 10 DHCP Client Microsoft Windows Research April 18, 2019 The Story of Two Winning Pwn2Own JIT Vulnerabilities in Mozilla Firefox Mozilla Pwn2Own Research April 11, 2019 A Series of Unfortunate Images: Drupal 1-click to RCE Exploit Chain Detailed Drupal TIP Research April 03, 2019 Loading up a pair of Qt bugs: Detailing CVE-2019-1636 and CVE-2019-6739 Qt Cisco Malwarebytes Research