@darknavy_blog CVE-2024-5274: A Minor Flaw in V8 Parser Leading to Catastrophes #Security #Vulnerabilities #Research
@searchlight_labs Critical Magento Vulnerabilities: Pre-Auth RCE Deep Dive #Cybersecurity #Vulnerabilities #Exploitation
@searchlight_labs ServiceNow CVE-2024-4879, CVE-2024-5178 & CVE-2024-5217: Exploit Chain #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Chaining Three Bugs to Access All Your ServiceNow Data #Cybersecurity #Vulnerabilities #Exploitation
@searchlight_labs Advisory: Next.js SSRF (CVE-2024-34351) #CyberSecurity #Vulnerabilities #Research
@searchlight_labs Continuing the Citrix Saga: CVE-2023-5914 & CVE-2023-6184 #CyberSecurity #Vulnerabilities #ThreatIntel
@searchlight_labs Ivanti's Pulse Connect Secure Auth Bypass Round Two #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Citrix Bleed: Leaking Session Tokens with CVE-2023-4966 #CyberSecurity #Vulnerabilities #Exploits
@cloud_foundry USN-6290-1: LibTIFF vulnerabilities #Security #OpenSource #Vulnerabilities
@searchlight_labs RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044) #CyberSecurity #Vulnerabilities #RCE
@searchlight_labs Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2) #CyberSecurity #Vulnerabilities #CVE
@searchlight_labs Advisory: ShareFile Pre-Auth RCE (CVE-2023-24489) #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Advisory: Oracle Opera Pre-Auth RCE (CVE-2023-21932) #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails #Cybersecurity #Vulnerabilities #RubyOnRails
@searchlight_labs Exploiting Static Site Generators: When Static Is Not Actually Static #Cybersecurity #Vulnerabilities #WebSecurity
@searchlight_labs Breaking Bitbucket: Pre Auth Remote Command Execution (CVE-2022-36804) #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Understanding CVE-2022-22972 (VMWare Workspace One Access Auth Bypass) #CyberSecurity #Vulnerabilities #Research
@searchlight_labs Cloudflare Pages, part 3: The return of the secrets #CyberSecurity #Vulnerabilities #Cloudflare
@searchlight_labs Cloudflare Pages, part 1: The fellowship of the secret #CyberSecurity #Vulnerabilities #Research
@searchlight_labs Hacking a Bank by Finding a 0day in DotCMS #CyberSecurity #Vulnerabilities #Hacking
@searchlight_labs Eliminating Dangling Elastic IP Takeovers with Ghostbuster #Cybersecurity #Vulnerabilities #CloudSecurity
@searchlight_labs Advisory: Solarwinds Web Help Desk Arbitrary HQL Evaluation (CVE-2021-35232) #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Solarwinds Web Help Desk: When the Helpdesk is too Helpful #CyberSecurity #Vulnerabilities #ThreatIntel
@searchlight_labs Advisory: VMWare Workspace One Access (CVE-2021-22056) #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Stealing administrative JWT's through post auth SSRF (CVE-2021-22056) #Cybersecurity #Vulnerabilities #Exploitation
@searchlight_labs Turning bad SSRF to good SSRF: Websphere Portal (CVE-2021-27748) #CyberSecurity #Vulnerabilities #WebSphere
@searchlight_labs Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 #CyberSecurity #Vulnerabilities #Exploitation
@searchlight_labs Exploiting GraphQL #CyberSecurity #GraphQL #Vulnerabilities
@searchlight_labs Contextual Content Discovery: You've forgotten about the API endpoints #CyberSecurity #API #Vulnerabilities
@0day_work An example why NAT is NOT security | 0day.work #CyberSecurity #Networking #Vulnerabilities
@0day_work How I recovered your private key or why small keys are bad | 0day.work #Security #Cryptography #Vulnerabilities