Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
CVE-2022-21661: Exposing Database Info via WordPress SQL Injection
January 18, 2022

CVE-2022-21661: Exposing Database Info via WordPress SQL Injection

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor
December 18, 2021

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader
October 21, 2021

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

CVE-2021-26420: Remote Code Execution in SharePoint via Workflow Compilation
October 06, 2021

CVE-2021-26420: Remote Code Execution in SharePoint via Workflow Compilation

CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug
September 22, 2021

CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug

Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting using Binary Ninja
September 09, 2021

Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting using Binary Ninja

CVE-2021-2429: A Heap-based Buffer Overflow Bug in the MySQL InnoDB memcached Plugin
September 02, 2021

CVE-2021-2429: A Heap-based Buffer Overflow Bug in the MySQL InnoDB memcached Plugin

From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!
August 18, 2021

From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!

CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts
July 28, 2021

CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts

CVE-2021-31969: Underflowing in the Clouds
July 21, 2021

CVE-2021-31969: Underflowing in the Clouds