Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
CVE-2021-25646: Getting Code Execution on Apache Druid
March 29, 2021

CVE-2021-25646: Getting Code Execution on Apache Druid

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint
March 17, 2021

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers
March 11, 2021

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers

CVE-2020-8625: A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server
February 25, 2021

CVE-2020-8625: A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server

ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag
February 18, 2021

ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag

Three More Bugs in Orion’s Belt
February 11, 2021

Three More Bugs in Orion’s Belt

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref
January 28, 2021

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform
January 21, 2021

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier
January 19, 2021

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

MindShaRE: Analysis of VMware Workstation and ESXi Using Debug Symbols from Flings
January 07, 2021

MindShaRE: Analysis of VMware Workstation and ESXi Using Debug Symbols from Flings