Blog
Security Research
Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution
Alvaro MuñozSecurity Research
How XBOW Turned a JavaScript Hint Into a Working File Inclusion
Nico WaismanAI Research
Agents Built From Alloys
Albert ZieglerSecurity Research
When the Heat Gets to Your Database: A Refreshing SQL Injection Discovery in Z-Push
Javier GilSecurity Research
Finding XSS in Salesforce Aura Components: How XBOW Got Creative
Diego JuradoSecurity Research
CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest
Diego JuradoSecurity Research
Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN
Alvaro MuñozCompany News
The Road to Top 1: How XBOW Did It
Nico WaismanSecurity Research
