Category: Vulnerability Research

Vulnerability Research

CVE-2025-61622: PyFory – Insecure Pickle Deserialization to Remote Code Execution

May 28, 2026 ·19 min read

Vulnerability Research

CVE-2025-48459: Apache IoTDB – Unsafe Deserialization via Class.forName() to RCE

May 27, 2026 ·12 min read

Vulnerability Research

CVE-2024-52577 Apache Ignite RCE via Deserialization Exploit

May 26, 2026 ·10 min read

Vulnerability Research

CVE-2025-54539: Apache ActiveMQ NMS AMQP Deserialization Policy Bypass to RCE

May 19, 2026 ·11 min read

Vulnerability Research

Electron app security risks – Part 2: Real-world RCE chains in Discord and Element

May 8, 2026 ·26 min read

Vulnerability Research

CVE-2025-57738: Apache Syncope Groovy Injection RCE

Apr 20, 2026 ·6 min read

Vulnerability Research

CVE-2024-52012 Apache Solr Path Traversal RCE Attack

Apr 9, 2026 ·9 min read

Vulnerability Research

CVE-2024-54676 – Apache OpenMeetings OpenJPA Deserialization RCE

Mar 26, 2026 ·16 min read

Vulnerability Research

RegPwn (CVE-2026-24291): Windows Registry Vulnerability Explained 

Mar 23, 2026 ·10 min read

Vulnerability Research

CVE-2026-22729: JSONPath Injection in Spring AI’s PgVectorStore

Mar 19, 2026 ·10 min read