Overview
News
Technologies
Salaries
Products
People
Growth
Financials

Overview

Latests Blog Posts Disclosed Vulnerabilities I’ve been in the vulnerability research field since 2004. Over the years, I’ve discovered and responsibly disclosed more than 300 vulnerabilities across a wide range of products and vendors.

News

Blog 1 month ago
Part 1/6 Systemic Risks in the Managed PostgreSQL Industry: Extension Risks Are Real! Exploiting PostGis Memory Corruption Bug at NeonDB, SupaBase and Many More
Back in April, I was talking with our system and software engineering teams at PRODAFT about the possibilities of using a managed database service. Due to the nature of our business, we simply cannot start using managed services right away. I told my team
Read more
Report
Blog 7 months ago
The Story of a Perfect Exploit Chain: Six Bugs That Looked Harmless Until They Became Pre-Auth RCE in a Security Appliance
It was May 2024, and our internal security team was evaluating the LogPoint SIEM/SOAR platform to replace our existing platform, potentially. As part of a habit I've built over the years -and honestly, part of our 3rd party due diligence- I gave myself 24
Read more
Report
Blog 8 months ago
Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain (ZDI-25-099, ZDI-25-097, ZDI-25-096)
It was yet another day at the office. Our team was internally discussing moving to a different platform analytics solution. Our team was really leaning more towards Posthog. It's one of the brilliant -I personally believe it's the best- products on the ma
Read more
Report
Blog 9 months ago
The Chessboard of Security: Insights on Product Development and Vulnerabilities from a Hacker Perspective
I was playing a quick game of chess while waiting for my coffee this morning. I had the white pieces and, as always, was eager to make the most of my first-move advantage. Early in the game, I pushed a center pawn forward aggressively, hoping to gain more
Read more
Report
Blog 10 months ago
Digital Cosmos: A Journey Through the Galaxy of Vulnerabilities
Whenever I ponder the vastness of space and our limited ability to observe only the Milky Way, I am utterly fascinated. It took us thirty years to position the James Webb Telescope at the Lagrange point (L2), offering us a mere glimpse into events that un
Read more
Report
Pro access
Upgrade to see all 10 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.