Category: Vulnerability Research

Vulnerability Research

REMOTE-003 Path Traversal in Configuration Subsystem of Apache Dubbo 3.3.x

Aug 5, 2026 ·17 min read

Vulnerability Research

Inside the HuggingFace AI Agent Intrusion (Part 2)

Jul 30, 2026 ·14 min read

Vulnerability Research

CVE-2026-63030 & CVE-2026-60137: wp2shell Pre-Auth RCE in WordPress Core via REST Batch-Route Confusion and SQL Injection

Jul 18, 2026 ·22 min read

Vulnerability Research

CVE-2026-42779: Apache MINA-Deserialization Allowlist Bypass to RCE

Jun 18, 2026 ·9 min read

Vulnerability Research

CVE-2026-7304: SGLang-Unauthenticated RCE via dill.loads

Jun 18, 2026 ·16 min read

Vulnerability Research

CVE-2025-27817: Apache Kafka Connect Arbitrary File Read

Jun 18, 2026 ·14 min read

Vulnerability Research

CVE-2025-61622: PyFory – Insecure Pickle Deserialization to Remote Code Execution

May 28, 2026 ·19 min read

Vulnerability Research

CVE-2025-48459: Apache IoTDB – Unsafe Deserialization via Class.forName() to RCE

May 27, 2026 ·12 min read

Vulnerability Research

CVE-2024-52577 Apache Ignite RCE via Deserialization Exploit

May 26, 2026 ·10 min read

Vulnerability Research

CVE-2025-54539: Apache ActiveMQ NMS AMQP Deserialization Policy Bypass to RCE

May 19, 2026 ·11 min read