Striga
striga.ai
Vulnerability Management
Application Security
Cybersecurity AI
As featured in
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
For a Fistful of Dollars: Less than $100 of Compute Surfaces Pre-auth RCE in Apache httpd
A double-free in Apache httpd's mod_http2 stream cleanup, surfaced by Striga, turns a two-frame HTTP/2 sequence into pre-auth Remote Code Execution.
Read more
Report
1994 Called. It wants its shell back
Striga reproduced and weaponized a 32-year-old telnet buffer overflow.
Read more
Report
Taking Down the Internet's Most Popular HTTP Client with a Single JSON Key
A Striga scan of axios revealed a prototype chain lookup that crashes any Node.js service forwarding user-controlled JSON through the world's most popular HTTP client.
Read more
Report
Breaking n8n's Expression Sandbox into Remote Code Execution
How Striga uncovered a critical sandbox escape and unsanitized node name injection in n8n's expression engine, chaining them into full Remote Code Execution.
Read more
Report
Report
Estonia Approves First Bitcoin, Crypto Bank After New Legislation
Striga is the first VASP to be approved since Estonia enacted a new legal framework restricting service providers in the bitcoin and crypto ecosystem.
Read more
Report