Labs

  1. MongoBleed: Unauthenticated memory disclosure vulnerability

    January 5, 2026

    MongoBleed: unauthenticated memory disclosure in MongoDB (CVE-2025-14847)

    Read more arrow_right_alt

  2. DeepChat cross-site scripting and remote code execution vulnerability

    December 17, 2025

    DeepChat AI agent XSS-to-RCE via Mermaid and Electron IPC

    Read more arrow_right_alt

  3. Enumerating Users and Mailboxes in Microsoft 365

    December 11, 2025

    Enumerating Users and Mailboxes in Microsoft Outlook 365 Web

    Read more arrow_right_alt

  4. React and Next.JS critical RCE

    December 4, 2025

    React and Next.js unauthenticated remote code execution (CVE-2025-55182, CVE-2025-66478)

    Read more arrow_right_alt

  5. SHA1 Hulud Second Wave Attacks

    November 26, 2025

    Sha1-Hulud Returns: A Second Wave of NPM Credential Theft

    Read more arrow_right_alt

  6. Chrome Zero-Day V8 type confusion flaws

    November 18, 2025

    Google Chrome V8 “type-confusion” zero-day vulnerabilities (CVE-2025-13223 & CVE-2025-13224)

    Read more arrow_right_alt

  7. NIM vulnerabilities in AIX

    November 14, 2025

    Critical IBM AIX vulnerabilities in Network Installation Manager (NIM)

    Read more arrow_right_alt

  8. Cisco Unified CCX Remote Code Execution vulnerabilities reported

    November 7, 2025

    Cisco Unified CCX Remote Code Execution Vulnerabilities (CVE-2025-20354, CVE-2025-20358)

    Read more arrow_right_alt

  9. October 27, 2025

    Windows Server Update Service (WSUS) remote code execution vulnerability (CVE-2025-59287)

    Read more arrow_right_alt