Articles

• The Curious Case of Apple iOS IKEv2 VPN On Demand
• Gmail Android app insecure Network Security Configuration.
• Reviewing Android Webviews fileAccess attack vectors.
• Droidstat-X, Android Applications Security Analyser Xmind Generator
• Uber Hacking: How we found out who you are, where you are and where you went!
• Google AOSP Email App HTML Injection
• XXE ALL THE THINGS!!! (including Apple iOS's Office Viewer)
• Good for Enterprise Android HTML Injection (CVE-2014-4925)
• From 0-day to exploit - Buffer overflow in Belkin N750 (CVE-2014-1635)
• Outlook.com android app HTML injection vulnerability
• Piercing SAPRouter with Metasploit

Latest Advisories

• CVE-2025-55107 - Stored Cross-Site Scripting in ArcGIS Enterprise Sites
• CVE-2025-55103 - Stored Cross-Site Scripting in ArcGIS Enterprise Sites
• CVE-2025-53122 - SQLi in OpenNMS Horizon and Meridian
• CVE-2025-53121 - Multiple stored XSS in OpenNMS Horizon
• CVE-2025-48953 - Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads

Latest Articles

• The Curious Case of Apple iOS IKEv2 VPN On Demand
• Gmail Android app insecure Network Security Configuration.
• Reviewing Android Webviews fileAccess attack vectors.
• Droidstat-X, Android Applications Security Analyser Xmind Generator
• Uber Hacking: How we found out who you are, where you are and where you went!