Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Detailing SaltStack Salt Command Injection Vulnerabilities
November 24, 2020

Detailing SaltStack Salt Command Injection Vulnerabilities

CVE-2020-16939: Windows Group Policy DACL Overwrite Privilege Escalation
October 27, 2020

CVE-2020-16939: Windows Group Policy DACL Overwrite Privilege Escalation

Detailing Two VMware Workstation TOCTOU Vulnerabilities
October 22, 2020

Detailing Two VMware Workstation TOCTOU Vulnerabilities

CVE-2019-0230: Apache Struts OGNL Remote Code Execution
October 07, 2020

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

The Anatomy of a Bug Door: Dissecting Two D-Link Router Authentication Bypasses
October 01, 2020

The Anatomy of a Bug Door: Dissecting Two D-Link Router Authentication Bypasses

Exploiting Other Remote Protocols in IBM WebSphere
September 29, 2020

Exploiting Other Remote Protocols in IBM WebSphere

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data
September 16, 2020

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

CVE-2020-7460: FreeBSD Kernel Privilege Escalation
September 01, 2020

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows
August 27, 2020

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor
August 11, 2020

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor