Uncovering bypasses, RCE, SSRF, CSRF, and account-takeover vulnerabilities in WSO2 products.

Exploitation of multiple vulnerabilities in GLPI to gain remote code execution from unauthenticated privileges.

A pre-authentication remote code execution vulnerability was found on Jupiter X Core Plugin <= 4.6.5 (CVE-2024-7772).

We provide details about CVE-2023-49103 and CVE-2023-49105

Ambionics Security team discovered a pre-authentication remote code execution in vBulletin 5.6.9.

Ambionics Security team discovered an RCE in Laravel, when the framework is in debug mode.