Elttam
elttam.com
As featured in
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
Expert‑led penetration testing augmented by intelligent systems. We uncover real weaknesses and help strengthen your systems against real‑world threats.
News
Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.
Read more
Report
Cruising for Shells in Flowise - elttam
After reviewing Flowise, a popular AI agent/workflow platform, and its history of critical security advisories, we uncovered 6 new remote code execution vulnerabilities in v3.1.1/v3.1.2.
Read more
Report
Top 10 web hacking techniques of 2025
Welcome to the Top 10 Web Hacking Techniques of 2025, the 19th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year
Read more
Report
ORM Leaking More Than You Joined For - elttam
Discover how ORM Leak vulnerabilities affect more frameworks than you think, and how attackers can bypass common protections to steal sensitive data.
Read more
Report
New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam
A new RCE gadget chain discovered in the sqlite3 gem affects all default Rails installations. Learn how unsafe reflection leads to remote code execution.
Read more
Report
Pro access
Upgrade to see all 27 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.