Jan 23, 2022

Advisory: Solarwinds Web Help Desk Arbitrary HQL Evaluation (CVE-2021-35232)

Jan 17, 2022

Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)

Jan 17, 2022

Advisory: VMWare Workspace One Access (CVE-2021-22056)

Dec 26, 2021

Turning bad SSRF to good SSRF: Websphere Portal (CVE-2021-27748)

Dec 25, 2021

Advisory: Websphere Portal SSRFs & Post Auth RCE - CVE-2021-27748

Nov 30, 2021

Discovering Full Read SSRF in Jamf (CVE-2021-39303 & CVE-2021-40809)

Nov 30, 2021

Advisory: Jamf Pro SSRF - CVE-2021-39303 & CVE-2021-40809

Nov 2, 2021

Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237

Nov 2, 2021

Advisory: Sitecore RCE via Insecure Deserialization - CVE-2021-42237

Aug 29, 2021

Exploiting GraphQL
Page 5 of 7