Labs

  1. Arbitrary file read vulnerability in jsPDF

    January 12, 2026

    Critical jsPDF Vulnerability Enables Arbitrary File Read in Node.js (CVE-2025-68428)

    Read more arrow_right_alt

  2. MongoBleed: Unauthenticated memory disclosure vulnerability

    January 5, 2026

    MongoBleed: unauthenticated memory disclosure in MongoDB (CVE-2025-14847)

    Read more arrow_right_alt

  3. DeepChat cross-site scripting and remote code execution vulnerability

    December 17, 2025

    DeepChat AI agent XSS-to-RCE via Mermaid and Electron IPC

    Read more arrow_right_alt

  4. Enumerating Users and Mailboxes in Microsoft 365

    December 11, 2025

    Enumerating Users and Mailboxes in Microsoft Outlook 365 Web

    Read more arrow_right_alt

  5. React and Next.JS critical RCE

    December 4, 2025

    React and Next.js unauthenticated remote code execution (CVE-2025-55182, CVE-2025-66478)

    Read more arrow_right_alt

  6. SHA1 Hulud Second Wave Attacks

    November 26, 2025

    Sha1-Hulud Returns: A Second Wave of NPM Credential Theft

    Read more arrow_right_alt

  7. Chrome Zero-Day V8 type confusion flaws

    November 18, 2025

    Google Chrome V8 “type-confusion” zero-day vulnerabilities (CVE-2025-13223 & CVE-2025-13224)

    Read more arrow_right_alt

  8. NIM vulnerabilities in AIX

    November 14, 2025

    Critical IBM AIX vulnerabilities in Network Installation Manager (NIM)

    Read more arrow_right_alt

  9. Cisco Unified CCX Remote Code Execution vulnerabilities reported

    November 7, 2025

    Cisco Unified CCX Remote Code Execution Vulnerabilities (CVE-2025-20354, CVE-2025-20358)

    Read more arrow_right_alt