Explore CVE-2021-44228, a vulnerability in log4j affecting almost all software under the sun.

A small explanation of an Apache path traversal bug and an incomplete fix

Some boxes sting...

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read - voidz0r/CVE-2022-44268

Learn more about analysis on CVE-2023-27997, a heap overflow in FortiOS, the operating system behind FortiGate firewalls, enabling remote code execution.

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

Microsoft SharePoint Server Elevation of Privilege Vulnerability - Chocapikk/CVE-2023-29357

Over the last year or so, we've seen the mass exploitation of managed file transfer software. From GoAnywhere MFT, MOVEIt, and our own work on Citrix Sharefile. The threats towards enterprises through managed file transfer software has really hit home after…

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence - ErikWynter/CVE-2023-22515-Scan

CVE-2023-22515: Confluence Broken Access Control Exploit - Chocapikk/CVE-2023-22515

A recently disclosed vulnerability in JetBrains can lead to Remote Code Execution. Are you up to date?

Last year, I discovered a Same-Origin Policy (SOP) bypass in Chrome that allowed an attacker to leak the full URLs of another window’s navigation history. While attacks could be conducted cross-origin, these attacks were only possible if the two windows were…

It's time for another round Citrix Patch Diffing! Earlier this month Citrix released a security bulletin which mentioned "unauthenticated buffer-related vulnerabilities" and two CVEs. These issues affected Citrix NetScaler ADC and NetScaler Gateway.

A recently disclosed CVE for the Orthanc DICOM server can be used to obtain Remote Code Execution. As a PoC was not available, we wrote one.

Компания Apple обновила прошивку Magic Keyboard, исправив уязвимость, которая позволяла потенциальным злоумышленникам осуществлять инжекты нажатий клавиш через Bluetooth.