Our Blog

From Discovery to Disclosure: ReCrystallize Server Vulnerabilities

Reading time: ~11 min
Posted by Paul van der Haas on 22 March 2024
Categories: Exploit, Vulnerability, Webapps, Cve-2024-26331, Cve-2024-28269, Web application
TL&DR – While on an assessment, I found an instance of ReCrystallize Server. It had many problems, some of which...

The hunt for Chromium issue 1072171

Reading time: ~40 min
Posted by Javier Jimenez on 29 May 2020
Categories: Browser, Chrome, Exploit development, Vulnerability research, 0day, V8, Vulnerability
Intro The last few months I’ve been studying Chrome’s v8 internals and exploits with the focus of finding a type...

The power of variant analysis (Semmle QL) CVE-2019-15937 and CVE-2019-15938

Reading time: ~11 min
Posted by Hector Cuesta on 28 October 2019
Categories: Cve, Exploit, Variant analysis, Vulnerability research, Code analysis, Cve-2019-15937, Cve-2019-15938, Ql, Semmle, Vulnerability
Intro This post will try to do a small introduction to the QL language using real-world vulnerabilities that I found...

Google Docs XSS – no bounty today

Reading time: ~3 min
Posted by inaki on 04 March 2013
Categories: Programming, Python, Google, Vulnerability
A few days ago, during one of those nights with the baby crying at 2:00 am and the only thing...