// TAG

#Vulnerability Research

Posts in this collection, ordered newest first.

202605.14

1-Day AnalysisMay 14, 20264 min read

Analyzes an authorization-bypass RCE in OpenClaw caused by failing to sanitize approval fields forwarded through node.invoke.

202605.13

1-Day AnalysisMay 13, 20264 min read

Analyzes a SandboxJS escape that bypasses shallow taint tracking and exposes the host Function constructor.

202605.12

1-Day AnalysisMay 12, 20264 min read

Analyzes a blind SQL injection in JeecgBoot caused by dynamic filterSql concatenation and incomplete WAF validation.

202605.10

1-Day AnalysisMay 10, 20262 min read

Summarizes a Windows AFD.sys heap buffer overflow that allows a local attacker to escalate privileges to SYSTEM.

202605.09

1-Day AnalysisMay 09, 20262 min read

Analyzes a Langflow RCE caused by missing authentication on a public build API and passing attacker-controlled data to exec.