Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
The Battle Between White Box and Black Box Bug Hunting in Wireless Routers
March 11, 2021

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers

CVE-2020-8625: A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server
February 25, 2021

CVE-2020-8625: A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server

ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag
February 18, 2021

ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag

Three More Bugs in Orion’s Belt
February 11, 2021

Three More Bugs in Orion’s Belt

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref
January 28, 2021

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref

Announcing Pwn2Own Vancouver 2021
January 26, 2021

Announcing Pwn2Own Vancouver 2021

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform
January 21, 2021

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier
January 19, 2021

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

MindShaRE: Analysis of VMware Workstation and ESXi Using Debug Symbols from Flings
January 07, 2021

MindShaRE: Analysis of VMware Workstation and ESXi Using Debug Symbols from Flings

CVE-2020-27897: Apple macOS Kernel OOB Write Privilege Escalation Vulnerability
December 10, 2020

CVE-2020-27897: Apple macOS Kernel OOB Write Privilege Escalation Vulnerability