Tag
Exploit Development
Security Research
Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim
Federico Kirschbaum, Andres LuksenbergSecurity Research
React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond
Nico WaismanSecurity Research
Cooking an SQL Injection Vulnerability in Chef Automate
Javier GilSecurity Research
CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint
Nico WaismanSecurity Research
The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.
Nico WaismanSecurity Research
Another Byte Bites the Dust - How XBOW Turned a Blind SSRF into a File Reading Oracle
Alvaro MuñozSecurity Research
Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution
Alvaro MuñozSecurity Research
How XBOW Turned a JavaScript Hint Into a Working File Inclusion
Nico WaismanSecurity Research
When the Heat Gets to Your Database: A Refreshing SQL Injection Discovery in Z-Push
Javier GilSecurity Research
Finding XSS in Salesforce Aura Components: How XBOW Got Creative
Diego JuradoSecurity Research
CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest
Diego JuradoSecurity Research
Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN
Alvaro MuñozSecurity Research
The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project
Nico WaismanSecurity Research
Stored Cross-Site Scripting (XSS) in 2FAuth
Diego JuradoSecurity Research
LabsAI’s EDDI Project Path Traversal
Diego JuradoSecurity Research
SSRF & URI Validation Bypass in 2FAuth
Nico WaismanSecurity Research
How XBOW Found a Scoold Authentication Bypass
Nico WaismanSecurity Research
