Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight
May 25, 2023

Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight

CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service
May 02, 2023

CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service

CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100
April 20, 2023

CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100

Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS
April 06, 2023

Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor
February 28, 2023

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation
January 23, 2023

Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion
January 19, 2023

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management
November 23, 2022

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading
October 31, 2022

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2
September 08, 2022

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2