top of page

Offensive security, published.

Research notes, vulnerability disclosures and the guest series. Every piece is published on our blog, and each title below opens it there.

Exploit Security Blog

Our blog series that includes techniques, technologies and also our 'Exploit Society - Guest Writer Series'.

2356

All pieces in the series ->

Our own research

Disclosures

Vulnerabilities we found, reported and published, plus the research notes around them.

CVE-2019-12836

Cross site request forgery

CVE-2020-27199

Authentication bypass

CVE-2021-45901

Unauthenticated username enumeration

CVE-2022-29593

Authentication bypass by capture replay

CVE-2022-43704

Channel accessible by non-endpoint

CVE-2023-33383

Authentication bypass via an out-of-bounds read vulnerability

CVE-2023-34723 · -34724 · -34725

Multiple vulnerabilities in the Techview LA-5570 wireless gateway

Substack

The newsletter

Writing from Victor Hanna, published to Substack. Subscribe and new pieces arrive in your inbox as they land.

Read on substack ->

Start with a 30-min scoping call

We will discuss your environment, explain the most relevant testing approach, and confirm whether Exploit Security is the right fit.

bottom of page