Advisory: DotCMS Remote Code Execution (CVE-2022-26352) #CyberSecurity #Vulnerability #Exploit
Hacking a Bank by Finding a 0day in DotCMS #CyberSecurity #Vulnerabilities #Hacking
Advisory: VMWare Workspace One UEM SSRF - CVE-2021-22054 #CyberSecurity #Vulnerability #Research
Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054) #CyberSecurity #Vulnerability #Research
Diving Deeper into WatchGuard Pre-Auth RCE - CVE-2022-26318 #CyberSecurity #Vulnerability #Exploit
Advisory: Dynamicweb Logic Flaw Leading to RCE (CVE-2022-25369) #CyberSecurity #Vulnerability #RCE
Logic Flaw Leading to RCE in Dynamicweb 9.5.0 - 9.12.7 #CyberSecurity #Vulnerability #Exploit
Eliminating Dangling Elastic IP Takeovers with Ghostbuster #Cybersecurity #Vulnerabilities #CloudSecurity
Advisory: Solarwinds Web Help Desk Arbitrary HQL Evaluation (CVE-2021-35232) #CyberSecurity #Vulnerabilities #Exploitation
Solarwinds Web Help Desk: When the Helpdesk is too Helpful #CyberSecurity #Vulnerabilities #ThreatIntel
Advisory: VMWare Workspace One Access (CVE-2021-22056) #CyberSecurity #Vulnerabilities #Exploitation
Stealing administrative JWT's through post auth SSRF (CVE-2021-22056) #Cybersecurity #Vulnerabilities #Exploitation
Turning bad SSRF to good SSRF: Websphere Portal (CVE-2021-27748) #CyberSecurity #Vulnerabilities #WebSphere
Advisory: Websphere Portal SSRFs & Post Auth RCE - CVE-2021-27748 #CyberSecurity #Vulnerability #Research
Advisory: Jamf Pro SSRF - CVE-2021-39303 & CVE-2021-40809 #CyberSecurity #Vulnerability #Jamf
Discovering Full Read SSRF in Jamf (CVE-2021-39303 & CVE-2021-40809) #CyberSecurity #Vulnerability #Research
Advisory: Sitecore RCE via Insecure Deserialization - CVE-2021-42237 #CyberSecurity #Vulnerability #Exploit
Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 #CyberSecurity #Vulnerabilities #Exploitation
Exploiting GraphQL #CyberSecurity #GraphQL #Vulnerabilities
Contextual Content Discovery: You've forgotten about the API endpoints #CyberSecurity #API #Vulnerabilities