Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion
January 19, 2023

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion

Announcing Pwn2Own Vancouver for 2023
January 12, 2023

Announcing Pwn2Own Vancouver for 2023

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management
November 23, 2022

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading
October 31, 2022

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2
September 08, 2022

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution
September 06, 2022

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution

Looking at Patch Gap Vulnerabilities in the VMware ESXi TCP/IP Stack
July 27, 2022

Looking at Patch Gap Vulnerabilities in the VMware ESXi TCP/IP Stack

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability
July 14, 2022

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability

CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack
June 16, 2022

CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack

Is exploiting a null pointer deref for LPE just a pipe dream?
June 02, 2022

Is exploiting a null pointer deref for LPE just a pipe dream?