Latest Insights CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft October 27, 2026 Bobby Gould Read Full Article July 16, 2019 MindShaRE: Automated Bug Hunting by Modeling Vulnerable Code MindshaRE Research Reverse Engineering July 01, 2019 The Left Branch Less Travelled: A Story of a Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox Research June 20, 2019 Remote Code Execution via Ruby on Rails Active Storage Insecure Deserialization Ruby on Rails Research Exploit June 11, 2019 Exploiting the Windows Task Scheduler Through CVE-2019-1069 Microsoft Exploit Research May 21, 2019 RCE Without Native Code: Exploitation of a Write-What-Where in Internet Explorer Microsoft Internet Explorer Research May 13, 2019 Updates and Enhancements to the Targeted Incentive Program TIP Program News Research May 07, 2019 Taking Control of VMware Through the Universal Host Controller Interface: Part 1 VMware Pwn2Own Research April 25, 2019 CVE-2019-0726: An RCE Vulnerability in the Windows 10 DHCP Client Microsoft Windows Research April 18, 2019 The Story of Two Winning Pwn2Own JIT Vulnerabilities in Mozilla Firefox Mozilla Pwn2Own Research April 11, 2019 A Series of Unfortunate Images: Drupal 1-click to RCE Exploit Chain Detailed Drupal TIP Research