CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

July 25, 2025 | Bobby Gould CONTINUE READING

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

Blog post

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

May 18, 2021
Microsoft, IIS, Research

The May 2021 Security Update Review

Blog post

The May 2021 Security Update Review

May 11, 2021
Adobe, Microsoft, Security Patch

CVE-2021-26900: Privilege Escalation Via a Use After Free Vulnerability In win32k

Blog post

CVE-2021-26900: Privilege Escalation Via a Use After Free Vulnerability In win32k

May 04, 2021
Windows, Research

Parallels Desktop RDPMC Hypercall Interface and Vulnerabilities

Blog post

Parallels Desktop RDPMC Hypercall Interface and Vulnerabilities

April 29, 2021
Parallels, Research

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

Blog post

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

April 22, 2021
Linux, Research

The April 2021 Security Update Review

Blog post

The April 2021 Security Update Review

April 13, 2021
Security Patch, Microsoft, Adobe

Pwn2Own 2021 - Schedule and Live Results

Blog post

Pwn2Own 2021 - Schedule and Live Results

April 06, 2021
Pwn2Own, Results, Microsoft, Tesla, Adobe, VMware, Zoom

CVE-2021-25646: Getting Code Execution on Apache Druid

Blog post

CVE-2021-25646: Getting Code Execution on Apache Druid

March 29, 2021
Apache, Druid, Research

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

Blog post

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

March 17, 2021
SharePoint, Microsoft, Research

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers

Blog post

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers

March 11, 2021
NETGEAR, Reverse Engineering, Research