Reports-Research - Page 2 of 4 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Reports-Research

Reports-Research Critical RCE Vulnerability in F5 BIG-IP [CVE-2022-26352] A research case study on F5’s BIG-IP product critical RCE vulnerability – describing its function, impact, and possible mitigation strategies. Jun 24, 2022 1 min read
Reports-Research Critical RCE in dotCMS Content Management Software An in-depth analysis of a critical RCE in the dotCMS Content Management Software. Find out how the vulnerability works and how to manage the risk. Jun 17, 2022 1 min read
Reports-Research AWS Lambda Command Injection Explore how an attack can be performed using a command injection vulnerability in AWS’ Lambda Functions, and the steps you can take to prevent it. Jun 10, 2022 1 min read
Reports-Research PwnKit: Local Privilege Escalation Vulnerability PwnKit: Discover the exploitation techniques used by attackers for this vulnerability, and how your team can mitigate the risk. May 27, 2022 1 min read
Reports-Research Exploitation of Spring4shell in the Wild Spring4Shell is a vulnerability of critical severity affecting Java’s most popular framework, Spring. May 16, 2022 1 min read
Reports-Research WordPress LiteSpeed Cache Vulnerability [CVE-2020-29172] CVE-2020-29172 is a cross-site scripting (XSS) vulnerability. The Server IP option can be used to exploit cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin for WordPress prior… Dec 21, 2021 1 min read
Reports-Research Microsoft MSHTML Remote Code Execution [CVE-2021-40444] MSHTML (also known as Trident) is a software component used to render web pages on Windows. Although it’s most commonly associated with Internet Explorer, it is also used… Dec 10, 2021 1 min read
Reports-Research PrintNightmare Vulnerability [CVE 2021-1675 & CVE-2021-34527] This document illustrates the exploitation of the vulnerability found in the Windows spooler service. Originally thought to be a local privilege escalation vulnerability in the Windows Print Spooler,… Nov 24, 2021 1 min read
Reports-Research CVE 2021-42013 – Recent Vulnerabilities in Apache HTTP Server This document aims at explaining some recent vulnerabilities in Apache HTTP Server that leads to attacks like Path Traversal and Remote Code Execution. A flaw was found in… Nov 24, 2021 1 min read
Reports-Research OWASP Top 10 Web Application Security Threats and Standards This paper is a one-stop user guide covering various critical web application vulnerabilities mapped under important documentation like OWASP Top 10, OWASP ASVS, WASC, and SANS CWE 25.… Oct 1, 2021 1 min read
Reports-Research Polkit Authentication Bypass Local Privesc Vulnerability This paper explains the exploitation of the authentication bypass vulnerability found in polkit, which allows an unprivileged user to call privileged methods by taking root access using dbus.… Oct 1, 2021 1 min read
Reports-Research CurveBall – CryptoAPI Spoofing Vulnerability [CVE-2020-0601] This paper aims to explain the CVE-2020-0601, referred to as CurveBall, which is a web browser security vulnerability in which the signature of certificates is not correctly verified.… Oct 1, 2021 1 min read