pwn.ai
pwn.ai
As featured in
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
AI-powered pentesting that finds real vulnerabilities and delivers working exploits. Deploy in minutes, get audit-ready reports in hours. Built by Octagon Networks.
News
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP
WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Read more
Report
XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)
A pre-authentication XSS to RCE chain in WordPress Core that allows unauthenticated attackers to achieve remote code execution on any default WordPress installation through the login page.
Read more
Report
ImageMagick: From Arbitrary File Read to File Write In Every Policy
How pwn.ai turned a routine client pentest into multiple ImageMagick exploits. By autonomously researching the product's internals for days, it found a path from a single image upload to file leaks, security policy bypasses, and remote code execution acro
Read more
Report
CVE-2025-54322 (ZERODAY) - Unauthenticated Root RCE affecting 70,000+ Hosts
A critical zero-day vulnerability, CVE-2025-54322, has been discovered that enables Unauthenticated Root Remote Command Execution (RCE) in devices running Xspeeder's SXZOS firmware. These networking devices, primarily edge routers and SD-WAN appliances, a
Read more
Report