Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
CVE-2025-23298: Getting Remote Code Execution in NVIDIA Merlin
September 24, 2025

CVE-2025-23298: Getting Remote Code Execution in NVIDIA Merlin

CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
July 25, 2025

CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

Extracting Embedded MultiMediaCard (eMMC) contents in-system
June 20, 2025

Extracting Embedded MultiMediaCard (eMMC) contents in-system

CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
May 07, 2025

CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS

Announcing Pwn2Own Berlin and Introducing an AI Category
February 24, 2025

Announcing Pwn2Own Berlin and Introducing an AI Category

Detailing the Attack Surfaces of the Tesla Wall Connector EV Charger
December 17, 2024

Detailing the Attack Surfaces of the Tesla Wall Connector EV Charger

SolarWinds Access Rights Manager: One Vulnerability to LPE Them All
December 12, 2024

SolarWinds Access Rights Manager: One Vulnerability to LPE Them All

From Pwn2Own Automotive: More Autel Maxicharger Vulnerabilities
October 03, 2024

From Pwn2Own Automotive: More Autel Maxicharger Vulnerabilities

Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor
September 26, 2024

Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor

Announcing Pwn2Own Automotive for 2025
September 24, 2024

Announcing Pwn2Own Automotive for 2025