Tag
CVE Analysis
Security Research
Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim
Federico Kirschbaum, Andres LuksenbergSecurity Research
Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW
Nico WaismanSecurity Research
Tales From the Trace: How XBOW Reasons Its Way Into Finding IDORs
Adrian Losada PitaTechnical Deep Dive
Cooking an SQL Injection Vulnerability in Chef Automate
Javier GilSecurity Research
CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint
Nico WaismanSecurity Research
Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution
Alvaro MuñozTechnical Deep Dive
When the Heat Gets to Your Database: A Refreshing SQL Injection Discovery in Z-Push
Javier GilSecurity Research
CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest
Diego JuradoSecurity Research
Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN
Alvaro MuñozSecurity Research
The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project
Nico WaismanSecurity Research
SSRF & URI Validation Bypass in 2FAuth
Nico WaismanSecurity Research
