responsible-disclosure 7
- When investigating novel 0-days leads to the discovery of novel 0-days
- Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI
- Vtenext 25.02 vulnerability research
- Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions in Prevent Direct Access Wordpress Plugin (CVE-2025-3861)
- How NOT to react to a responsible disclosure (CVE-2023-47444)
- Authenticated Static Code Injections in OpenCart (CVE-2023-47444)
- Digital Private Vault (APK) - Subverting an (in)secure Android vault