Latest Insights CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft October 27, 2026 Bobby Gould Read Full Article June 01, 2023 CVE-2023-24941: Microsoft Network File System Remote Code Execution Microsoft NFS Research May 25, 2023 Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight Sonos Pwn2Own Research Exploit May 02, 2023 CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service Microsoft DHCP Research April 20, 2023 CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100 Western Digital Pwn2Own Research April 06, 2023 Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS Parallels Research Bash February 28, 2023 CVE-2022-38108: RCE in SolarWinds Network Performance Monitor SolarWinds Research Detection Guidance January 23, 2023 Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation Microsoft Research CSRSS January 19, 2023 CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion Adobe ColdFusion Research November 23, 2022 CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management ManageEngine Research October 31, 2022 Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading Apache Batik Research