Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Pwn2Own Automotive 2024 - Day One Results
January 23, 2024

Pwn2Own Automotive 2024 - Day One Results

Pwn2Own Automotive 2024 - The Full Schedule
January 23, 2024

Pwn2Own Automotive 2024 - The Full Schedule

Pwn2Own Vancouver 2024: Bringing Cloud-Native/Container Security to Pwn2Own
January 16, 2024

Pwn2Own Vancouver 2024: Bringing Cloud-Native/Container Security to Pwn2Own

CVE-2023-38600: Story of an innocent Apple Safari copyWithin gone (way) outside
October 18, 2023

CVE-2023-38600: Story of an innocent Apple Safari copyWithin gone (way) outside

Looking at the Attack Surface of the Sony XAV-AX5500 Head Unit
October 05, 2023

Looking at the Attack Surface of the Sony XAV-AX5500 Head Unit

Finding Deserialization Bugs in the SolarWinds Platform
September 21, 2023

Finding Deserialization Bugs in the SolarWinds Platform

CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki
August 23, 2023

CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki

CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability
July 20, 2023

CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability

CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs
June 29, 2023

CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs

CVE-2022-31696: An Analysis of a VMware ESXi TCP Socket Keepalive Type Confusion LPE
June 22, 2023

CVE-2022-31696: An Analysis of a VMware ESXi TCP Socket Keepalive Type Confusion LPE