Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire
#Cybersecurity #Darknet #Vulnerabilities
A JPEG, a Race, and a Ghost: Breaking Discourse's Image Pipeline #Cybersecurity #Vulnerabilities #Research
Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine #Cybersecurity #Vulnerability #Research
Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 #CyberSecurity #Vulnerabilities #AI
wp2shell: Pre Authentication RCE in WordPress Core #Cybersecurity #Vulnerabilities #WordPress
Smashing the ServiceNow Sandbox - Pre Authentication RCE #CyberSecurity #Vulnerability #Exploit
CargoWise WebTracker - The Keys Were in the Cargo #CyberSecurity #Vulnerabilities #ThreatIntel
Two Bypasses for Chrome's Sanitizer API #CyberSecurity #Vulnerabilities #Chrome
Drupal Core Anonymous SQL Injection: CVE-2026-9082 #CyberSecurity #Vulnerabilities #Drupal
cPanel Pre-Auth File Read as Root: CVE-2026-29205 #CyberSecurity #Vulnerabilities #cPanel
Salesforce Marketing Cloud: Arbitrary Email Read via Weak Crypto #Cybersecurity #Vulnerabilities #DataBreach
cPanel Auth Bypass Detection: CVE-2026-41940 #CyberSecurity #Vulnerabilities #ThreatIntel
Magento PolyShell: Unauthenticated File Upload to RCE (APSB25-94) #CyberSecurity #Vulnerabilities #Exploitation
Hyoketsu - Solving the Vendor Dependency Problem in RE #CyberSecurity #Vulnerability #Research
We recently found ourselves looking into OpenText Directory Services (OTDS). We had seen it present on our customer's attack surface, and it seemed to be an interesting target. #CyberSecurity #Vulnerabilities #Research
Next.js RSC RCE Detection: CVE-2025-55182 & CVE-2025-66478 #Cybersecurity #Vulnerability #RCE
Oracle Identity Manager Pre-Auth RCE: CVE-2025-61757 #Cybersecurity #Vulnerabilities #Exploitation
Magento RCE via Nested Deserialization: CVE-2025-54236 #CyberSecurity #Vulnerabilities #RCE
Critical Bugs in Adobe Experience Manager: CVE-2025-54246 to CVE-2025-54252 #Cybersecurity #Vulnerabilities #Research
Path Traversal in Omnissa Workspace ONE UEM #CyberSecurity #Vulnerability #Exploit
AEM Forms Pre-Auth Vulnerabilities: Struts Devmode RCE & XXE #CyberSecurity #Vulnerability #RCE
ETQ Reliance RCE: Auth Bypass via Trailing Space (CVE-2025-34143) #CyberSecurity #Vulnerability #RCE
Novel SQL Injection in PDO Prepared Statements #CyberSecurity #SQLInjection #Vulnerabilities
RCE in Lighthouse Studio Survey Software (CVE-2025-34300) #CyberSecurity #Vulnerability #RCE
DNN CVE-2025-52488: NTLM Hash Exposure via .NET Unicode Quirks #CyberSecurity #DotNet #Vulnerabilities
Persistent XSS on Every AEM Cloud Site: CVE-2025-47114 & CVE-2025-47115 #CyberSecurity #Vulnerability #XSS
Novel SSRF Technique Involving HTTP Redirect Loops #CyberSecurity #Vulnerability #Research
Pre-Auth SQL Injection in Halo ITSM #Cybersecurity #Vulnerability #SQLInjection
Next.js Middleware Bypass CVE-2025-29927: Due Diligence Analysis #CyberSecurity #Vulnerabilities #WebDevelopment
Sitecore CVE-2025-27218: Pre-Auth RCE via Unsafe Deserialization #CyberSecurity #Vulnerability #RCE
CVE-2025-0108: PAN-OS Auth Bypass via Nginx/Apache Path Confusion #Cybersecurity #Vulnerabilities #CVE
How an obscure PHP footgun led to RCE in Craft CMS #CyberSecurity #PHP #Vulnerabilities
Citrix Denial of Service: Analysis of CVE-2024-8534 #CyberSecurity #Vulnerability #Analysis
Leveraging An Order of Operations Bug to Achieve RCE in Sitecore 8.x - 10.x #Cybersecurity #Vulnerability #Exploitation
Insecurity through Censorship: Vulnerabilities Caused by The Great Firewall #Cybersecurity #Vulnerabilities #Research
Critical Magento Vulnerabilities: Pre-Auth RCE Deep Dive #Cybersecurity #Vulnerabilities #Exploitation
ServiceNow Pre-Auth SSRF & RCE: CVE-2024-4879, CVE-2024-5178, CVE-2024-5217 #CyberSecurity #Vulnerability #Exploit
ServiceNow CVE-2024-4879, CVE-2024-5178 & CVE-2024-5217: Exploit Chain #CyberSecurity #Vulnerabilities #Exploitation
Chaining Three Bugs to Access All Your ServiceNow Data #Cybersecurity #Vulnerabilities #Exploitation
Why nested deserialization is harmful: Magento XXE (CVE-2024-34102) #CyberSecurity #Vulnerability #XXE