Category: Vulnerability Research

Vulnerability Research

CVE-2026-10520: OS Command Injection in Ivanti Sentry MICS API Enables Pre-Auth Root Shell

Sep 8, 2026 ·24 min read

Vulnerability Research

Archive Entry::name() Integer Underflow — Out-of-Bounds Read, Denial of Service and Information Disclosure in Apple’s mach_o Archive Parser (ld / libtool / ranlib)

Sep 7, 2026 ·36 min read

Vulnerability Research

CVE-2026-63077: XStream Deserialization in JetBrains TeamCity’s Agent Polling Protocol Enables Pre-Auth RCE

Aug 28, 2026 ·14 min read

Vulnerability Research

Log4j2 MarshalledObject Deserialization Bypass to RCE

Aug 26, 2026 ·13 min read

Vulnerability Research

CVE-2026-55255: IDOR in Langflow’s Flow Execution API Enables Cross-User Workflow Hijacking and Credential Theft

Aug 10, 2026 ·30 min read

Vulnerability Research

REMOTE-003 Path Traversal in Configuration Subsystem of Apache Dubbo 3.3.x

Aug 5, 2026 ·17 min read

Vulnerability Research

CVE-2026-16723: The Class-Loader-as-Primitive Bug Pattern Returns — Fastison 1.x Pre-Auth RCE via @JSONType + jar:http

Aug 4, 2026 ·32 min read

Vulnerability Research

wp2shell: A Pre-Auth WordPress Core RCE from a Missing Array Push

Jul 30, 2026 ·21 min read

Vulnerability Research

Januscape: A 16-Year-Old Field-Comparison Bug in the Linux KVM Shadow MMU

Jul 24, 2026 ·23 min read

Vulnerability Research

CVE-2026-63030 & CVE-2026-60137: wp2shell Pre-Auth RCE in WordPress Core via REST Batch-Route Confusion and SQL Injection

Jul 18, 2026 ·22 min read