We identified a vulnerability in SPIP's SQL engine, which allowed us to access the backoffice of the hacking platform Root-Me.

This article reveals a privilege escalation vulnerability affecting PHP-FPM.

Ambionics Security team discovered an RCE in Laravel, when the framework is in debug mode.

Ambionics Security team discovered a heap overflow that results in remote code execution on Sqreen's microagent.

Remote code execution using Symfony's _fragment's page and unsecure secret values.

We demonstrate how one can recover mt_rand()'s seed with only two outputs and without any bruteforce.