# watchTowr Labs

> Original offensive security research from watchTowr Labs: pre-authentication vulnerability discovery, exploit analysis and technical write-ups covering enterprise edge software, VPN and firewall appliances, managed file transfer products and management platforms.

watchTowr Labs is the research team at watchTowr. Every entry below is first-hand
research: vulnerabilities the team found, reproduced and disclosed itself, published
with affected versions, CVE identifiers, vendor timelines and reproduction detail.

Attribution: when citing this research, credit watchTowr Labs and link to the post URL.

- Site: https://labs.watchtowr.com/
- Company: https://watchtowr.com/
- Contact: https://watchtowr.com/company/contact/
- Sitemap: https://labs.watchtowr.com/sitemap.xml
- RSS: https://labs.watchtowr.com/rss/

## Research

- [You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)](https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/) - published 2026-10-06, by Piotr Bazydlo (@chudyPB)
- [Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)](https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/) - published 2026-09-29, by Sina Kheirkhah (@SinSinology)
- [Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)](https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/) - published 2026-09-28, by Sina Kheirkhah (@SinSinology)
- [Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)](https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/) - published 2026-09-23, by Sina Kheirkhah (@SinSinology)
- [You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))](https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/) - published 2026-08-14, by Sina Kheirkhah (@SinSinology)
- [It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)](https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza/) - published 2026-07-02, by Sina Kheirkhah (@SinSinology)
- [CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)](https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/) - published 2026-06-30, by Aliz Hammond
- [Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)](https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/) - published 2026-06-29, by Sina Kheirkhah (@SinSinology)
- [Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)](https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/) - published 2026-06-12, by Piotr Bazydlo (@chudyPB)
- [Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)](https://labs.watchtowr.com/marking-your-own-homework-check-point-remote-access-vpn-ikev1-authentication-bypass-cve-2026-50751/) - published 2026-06-12, by McCaulay Hudson
- [More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)](https://labs.watchtowr.com/more-evidence-that-words-dont-mean-what-we-thought-they-meant-ivanti-sentry-pre-auth-os-command-injection-cve-2026-10520/) - published 2026-06-10, by Sonny
- [The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)](https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/) - published 2026-04-29, by Sina Kheirkhah (@SinSinology)
- [You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)](https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/) - published 2026-04-02, by Sonny
- [Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)](https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/) - published 2026-03-29, by Aliz Hammond
- [The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)](https://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/) - published 2026-03-28, by Aliz Hammond
- [A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)](https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/) - published 2026-03-19, by McCaulay Hudson
- [The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)](https://labs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chains/) - published 2026-03-18, by Sonny
- [Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)](https://labs.watchtowr.com/sometimes-you-can-just-feel-the-security-in-the-design-junos-os-evolved-cve-2026-21902-rce/) - published 2026-03-03, by McCaulay Hudson
- [Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))](https://labs.watchtowr.com/buy-a-help-desk-bundle-a-remote-access-solution-solarwinds-web-help-desk-pre-auth-rce-chain-s/) - published 2026-02-25, by Piotr Bazydlo (@chudyPB)
- [Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)](https://labs.watchtowr.com/someone-knows-bash-far-too-well-and-we-love-it-ivanti-epmm-pre-auth-rces-cve-2026-1281-cve-2026-1340/) - published 2026-01-30, by Piotr Bazydlo (@chudyPB)
- [Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)](https://labs.watchtowr.com/attackers-with-decompilers-strike-again-smartertools-smartermail-wt-2026-0001-auth-bypass/) - published 2026-01-22, by Piotr Bazydlo (@chudyPB)
- [Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)](https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/) - published 2026-01-08, by Piotr Bazydlo (@chudyPB)
- [SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL](https://labs.watchtowr.com/soapwn-pwning-net-framework-applications-through-http-client-proxies-and-wsdl/) - published 2025-12-10, by Piotr Bazydlo (@chudyPB)
- [Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)](https://labs.watchtowr.com/stop-putting-your-passwords-into-random-websites-yes-seriously-you-are-the-problem/) - published 2025-11-25, by Jake Knott (@inkmoro)
- [When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446)](https://labs.watchtowr.com/when-the-impersonation-function-gets-used-to-impersonate-users-fortinet-fortiweb-auth-bypass/) - published 2025-11-14, by Sina Kheirkhah (@SinSinology)
- [Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101)](https://labs.watchtowr.com/is-it-citrixbleed4-well-no-is-it-good-also-no-citrix-netscalers-memory-leak-rxss-cve-2025-12101/) - published 2025-11-12, by Sina Kheirkhah (@SinSinology)
- [What’s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299)](https://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/) - published 2025-11-07, by Sonny
- [yIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242)](https://labs.watchtowr.com/yikes-watchguard-fireware-os-ikev2-out-of-bounds-write-cve-2025-9242/) - published 2025-10-16, by McCaulay Hudson
- [More Than DoS (Progress Telerik UI for ASP.NET AJAX Unsafe Reflection CVE-2025-3600)](https://labs.watchtowr.com/more-than-dos-progress-telerik-ui-for-asp-net-ajax-unsafe-reflection-cve-2025-3600/) - published 2025-10-10, by Piotr Bazydlo (@chudyPB)
- [Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882)](https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/) - published 2025-10-06, by Sonny
- [It's Never Simple Until It Is (Dell UnityVSA Pre-Auth Command Injection CVE-2025-36604)](https://labs.watchtowr.com/its-never-simple-until-it-is-dell-unityvsa-pre-auth-command-injection-cve-2025-36604/) - published 2025-10-03, by Sina Kheirkhah (@SinSinology)
- [It Is Bad (Exploitation of Fortra GoAnywhere MFT CVE-2025-10035) - Part 2](https://labs.watchtowr.com/it-is-bad-exploitation-of-fortra-goanywhere-mft-cve-2025-10035-part-2/) - published 2025-09-25, by Benjamin Harris
- [Is This Bad? This Feels Bad. (Fortra GoAnywhere CVE-2025-10035)](https://labs.watchtowr.com/is-this-bad-this-feels-bad-goanywhere-cve-2025-10035/) - published 2025-09-24, by Sonny
- [You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819)](https://labs.watchtowr.com/you-already-have-our-personal-data-take-our-phone-calls-too-freepbx-cve-2025-57819/) - published 2025-09-10, by Sonny
- [Cache Me If You Can (Sitecore Experience Platform Cache Poisoning to RCE)](https://labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/) - published 2025-08-29, by Piotr Bazydlo (@chudyPB)
- [The One Where We Just Steal The Vulnerabilities (CrushFTP CVE-2025-54309)](https://labs.watchtowr.com/the-one-where-we-just-steal-the-vulnerabilities-crushftp-cve-2025-54309/) - published 2025-08-27, by Sonny
- [Guess Who Would Be Stupid Enough To Rob The Same Vault Twice? Pre-Auth RCE Chains in Commvault](https://labs.watchtowr.com/guess-who-would-be-stupid-enough-to-rob-the-same-vault-twice-pre-auth-rce-chains-in-commvault/) - published 2025-08-20, by Piotr Bazydlo (@chudyPB)
- [Should Security Solutions Be Secure? Maybe We're All Wrong - Fortinet FortiSIEM Pre-Auth Command Injection (CVE-2025-25256)](https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/) - published 2025-08-15, by Sina Kheirkhah (@SinSinology)
- [Stack Overflows, Heap Overflows, and Existential Dread (SonicWall SMA100 CVE-2025-40596, CVE-2025-40597 and CVE-2025-40598)](https://labs.watchtowr.com/stack-overflows-heap-overflows-and-existential-dread-sonicwall-sma100-cve-2025-40596-cve-2025-40597-and-cve-2025-40598/) - published 2025-07-28, by Sina Kheirkhah (@SinSinology)
- [Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257)](https://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/) - published 2025-07-11, by Sina Kheirkhah (@SinSinology)
- [How Much More Must We Bleed? - Citrix NetScaler Memory Disclosure (CitrixBleed 2 CVE-2025-5777)](https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777/) - published 2025-07-04, by Sina Kheirkhah (@SinSinology)
- [Is b For Backdoor? Pre-Auth RCE Chain In Sitecore Experience Platform](https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/) - published 2025-06-17, by Piotr Bazydlo (@chudyPB)
- [Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428)](https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/) - published 2025-05-15, by Sonny
- [SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)](https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/) - published 2025-05-07, by Sina Kheirkhah (@SinSinology)
- [SonicBoom, From Stolen Tokens to Remote Shells - SonicWall SMA (CVE-2023-44221, CVE-2024-38475)](https://labs.watchtowr.com/sonicboom-from-stolen-tokens-to-remote-shells-sonicwall-sma100-cve-2023-44221-cve-2024-38475/) - published 2025-05-01, by Sina Kheirkhah (@SinSinology)
- [Fire In The Hole, We’re Breaching The Vault - Commvault Remote Code Execution (CVE-2025-34028)](https://labs.watchtowr.com/fire-in-the-hole-were-breaching-the-vault-commvault-remote-code-execution-cve-2025-34028/) - published 2025-04-24, by Sonny
- [Is The Sofistication In The Room With Us? - X-Forwarded-For and Ivanti Connect Secure (CVE-2025-22457)](https://labs.watchtowr.com/is-the-sofistication-in-the-room-with-us-x-forwarded-for-and-ivanti-connect-secure-cve-2025-22457/) - published 2025-04-04, by Aliz Hammond
- [XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748)](https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/) - published 2025-04-01, by Piotr Bazydlo (@chudyPB)
- [By Executive Order, We Are Banning Blacklists - Domain-Level RCE in Veeam Backup & Replication (CVE-2025-23120)](https://labs.watchtowr.com/by-executive-order-we-are-banning-blacklists-domain-level-rce-in-veeam-backup-replication-cve-2025-23120/) - published 2025-03-20, by Piotr Bazydlo (@chudyPB)
- [Bypassing Authentication Like It’s The ‘90s - Pre-Auth RCE Chain(s) in Kentico Xperience CMS](https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/) - published 2025-03-17, by Piotr Bazydlo (@chudyPB)
- [The Best Security Is When We All Agree To Keep Everything Secret (Except The Secrets) - NAKIVO Backup & Replication (CVE-2024-48248)](https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/) - published 2025-02-26, by Sonny
- [8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur](https://labs.watchtowr.com/8-million-requests-later-we-made-the-solarwinds-supply-chain-attack-look-amateur/) - published 2025-02-04, by Benjamin Harris
- [Get FortiRekt, I Am The Super_Admin Now - Fortinet FortiOS Authentication Bypass CVE-2024-55591](https://labs.watchtowr.com/get-fortirekt-i-am-the-super_admin-now-fortios-authentication-bypass-cve-2024-55591/) - published 2025-01-27, by Sonny
- [Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282)](https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/) - published 2025-01-12, by Sina Kheirkhah (@SinSinology)
- [Do Secure-By-Design Pledges Come With Stickers? - Ivanti Connect Secure RCE (CVE-2025-0282)](https://labs.watchtowr.com/do-secure-by-design-pledges-come-with-stickers-ivanti-connect-secure-rce-cve-2025-0282/) - published 2025-01-10, by Sina Kheirkhah (@SinSinology)
- [Backdooring Your Backdoors - Another $20 Domain, More Governments](https://labs.watchtowr.com/more-governments-backdoors-in-your-backdoors/) - published 2025-01-08, by Benjamin Harris
- [Cleo Harmony, VLTrader, and LexiCom - RCE via Arbitrary File Write (CVE-2024-50623)](https://labs.watchtowr.com/cleo-cve-2024-50623/) - published 2024-12-11, by Sina Kheirkhah (@SinSinology)
- [Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day](https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/) - published 2024-12-05, by Sonny
- [Pots and Pans, AKA an SSLVPN - Palo Alto PAN-OS CVE-2024-0012 and CVE-2024-9474](https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/) - published 2024-11-19, by Sonny
- [Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575](https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/) - published 2024-11-14, by Sina Kheirkhah (@SinSinology)
- [Visionaries Have Democratised Remote Network Access - Citrix Virtual Apps and Desktops (CVE-2024-8068 and CVE-2024-8069)](https://labs.watchtowr.com/visionaries-at-citrix-have-democratised-remote-network-access-citrix-virtual-apps-and-desktops-cve-unknown/) - published 2024-11-12, by Sina Kheirkhah (@SinSinology)
- [Fortinet FortiGate CVE-2024-23113 - A Super Complex Vulnerability In A Super Secure Appliance In 2024](https://labs.watchtowr.com/fortinet-fortigate-cve-2024-23113-a-super-complex-vulnerability-in-a-super-secure-appliance-in-2024/) - published 2024-10-14, by Aliz Hammond
- [We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI](https://labs.watchtowr.com/we-spent-20-to-achieve-rce-and-accidentally-became-the-admins-of-mobi/) - published 2024-09-11, by Benjamin Harris
- [Veeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)](https://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/) - published 2024-09-09, by Sina Kheirkhah (@SinSinology)
- [Auth. Bypass In (Un)Limited Scenarios - Progress MOVEit Transfer (CVE-2024-5806)](https://labs.watchtowr.com/auth-bypass-in-un-limited-scenarios-progress-moveit-transfer-cve-2024-5806/) - published 2024-06-25, by Aliz Hammond
- [No Way, PHP Strikes Again! (CVE-2024-4577)](https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/) - published 2024-06-07, by Aliz Hammond
- [Check Point - Wrong Check Point (CVE-2024-24919)](https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/) - published 2024-05-30, by Aliz Hammond
- [QNAP QTS - QNAPping At The Wheel (CVE-2024-27130 and friends)](https://labs.watchtowr.com/qnap-qts-qnapping-at-the-wheel-cve-2024-27130-and-friends/) - published 2024-05-17, by Aliz Hammond
- [Palo Alto - Putting The Protecc In GlobalProtect (CVE-2024-3400)](https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/) - published 2024-04-16, by Sonny
- [IBM QRadar - When The Attacker Controls Your Security Stack   (CVE-2022-26377)](https://labs.watchtowr.com/ibm-qradar-when-the-attacker-controls-your-security-stack/) - published 2024-04-12, by Sonny
- [“To live is to fight, to fight is to live! - IBM ODM Remote Code Execution](https://labs.watchtowr.com/double-k-o-rce-in-ibm-operation-decision-manager/) - published 2024-02-22, by Sonny
- [Ivanti Connect Secure CVE-2024-22024 - Are We Now Part Of Ivanti?](https://labs.watchtowr.com/are-we-now-part-of-ivanti/) - published 2024-02-09, by Sonny
- [Form Tools Remote Code Execution: We Need To Talk About PHP](https://labs.watchtowr.com/form-tools-we-need-to-talk-about-php/) - published 2024-02-08, by Sonny
- [The Second Wednesday Of The First Month Of Every Quarter: Juniper 0day Revisited](https://labs.watchtowr.com/the-second-wednesday-of-the-first-month-of-every-quarter-juniper-0day-revisited/) - published 2024-01-18, by Aliz Hammond
- [Welcome To 2024, The SSLVPN Chaos Continues - Ivanti CVE-2023-46805 & CVE-2024-21887](https://labs.watchtowr.com/welcome-to-2024-the-sslvpn-chaos-continues-ivanti-cve-2023-46805-cve-2024-21887/) - published 2024-01-13, by Aliz Hammond
- [XXE, You Can Depend On Me (OpenCMS CVE-2023-42344 and Friends)](https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/) - published 2023-11-21, by Sonny
- [Ghost In The Wire, Sonic In The Wall - Adventures With SonicWall](https://labs.watchtowr.com/ghost-in-the-wire-sonic-in-the-wall/) - published 2023-10-20, by Aliz Hammond
- [The Sky Has Not Yet Fallen - Curl (CVE-2023-38545)](https://labs.watchtowr.com/curl-cve-2023-38545-its-still-not-the-end-of-the-world/) - published 2023-10-11, by Aliz Hammond
- [Yet More Unauth Remote Command Execution Vulns in Firewalls - Sangfor Edition](https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/) - published 2023-10-05, by Sonny
- [90s Vulns In 90s Software (Exim) - Is the Sky Falling?](https://labs.watchtowr.com/exim-0days-90s-vulns-in-90s-software/) - published 2023-10-02, by Aliz Hammond
- [Orbeon Forms: The Final Form? On A Journey To RCE](https://labs.watchtowr.com/orbeon-forms-the-final-form/) - published 2023-09-08, by Sonny
- [CVE-2023-36844 And Friends: RCE In Juniper Devices](https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/) - published 2023-08-25, by Sonny
- [Log4Shell Is Dead! Long Live Log4Shell!](https://labs.watchtowr.com/log4shell-is-dead-long-live-log4shell/) - published 2023-08-14, by Sonny
- [Xortigate, or CVE-2023-27997 - The Rumoured RCE That Was](https://labs.watchtowr.com/xortigate-or-cve-2023-27997/) - published 2023-06-13, by Aliz Hammond
- [Fortinet and The Accidental Bug](https://labs.watchtowr.com/fortinet-and-the-accidental-bug/) - published 2023-06-09, by Aliz Hammond
- [GitLab Arbitrary File Read (CVE-2023-2825) Analysis](https://labs.watchtowr.com/gitlab-arbitrary-file-read-gitlab-cve-2023-2825-analysis/) - published 2023-05-25, by Sonny
- [Adobe Commerce (Magento) CVE-2022-24086 : Return Of The Text Interpolation](https://labs.watchtowr.com/adobe-commerce-magento-rce-cve-2022-24086/) - published 2023-04-10, by Aliz Hammond
- [ProjeQtOr - <10.2.2 Direct Object Injection Vulnerability](https://labs.watchtowr.com/projeqtor-10-2-2-direct-object-injection-vulnerability/) - published 2023-03-19, by Benjamin Harris
- [What Does This Key Open? - Docker Container Images (4/4)](https://labs.watchtowr.com/what-does-this-key-open/) - published 2023-02-23, by Aliz Hammond
- [Learning To Crawl (For DockerHub Enthusiasts, Not Toddlers) - Docker Container Images (3/4)](https://labs.watchtowr.com/learning-to-crawl-for-dockerhub-enthusiasts-not-toddlers-3-4/) - published 2023-02-15, by Aliz Hammond
- [Layer Cake: How Docker Handles Filesystem Access - Docker Container Images (2/4)](https://labs.watchtowr.com/layer-cake-how-docker-handles-filesystem-access-part-2-docker-containers/) - published 2023-02-09, by Aliz Hammond
- ["I don't need no zero-dayz" - Docker Container Images  (1/4)](https://labs.watchtowr.com/i-dont-need-no-zero-dayz-part-1-docker-containers/) - published 2023-02-03, by Aliz Hammond
- [We're Out Of Titles For VPN Vulns - It's Not Funny Anymore (Fortinet CVE-2022-42475)](https://labs.watchtowr.com/fortinet-no-more-funny-titles-cve-2022-42475/) - published 2023-01-31, by Aliz Hammond
- [Why It's Not Worth Goading Us On A Friday - CVE-2022-36537 At Scale](https://labs.watchtowr.com/why-its-not-worth-goading-us-on-a-friday-cve-2022-36537-at-scale/) - published 2022-12-07, by Aliz Hammond
- [Text4Shell++ - Where There’s Smoke, There’s Fire](https://labs.watchtowr.com/text4shell-where-theres-smoke-theres-fire/) - published 2022-11-08, by Aliz Hammond
- [OpenSSL 3.0.7 - Otherwise Known As, The Hype That Was Not](https://labs.watchtowr.com/otherwise-known-as-the-hype-that-was-not/) - published 2022-11-02, by Aliz Hammond
- [CVE-2022-44889 - Text4Shell Analysed](https://labs.watchtowr.com/cve-2022-44889-text4shell-analysed/) - published 2022-10-27, by Aliz Hammond
- [Walled Off: Handling DNS Poisoning At Scale](https://labs.watchtowr.com/walled-off-handling-dns-poisoning-at-scale/) - published 2022-10-27, by Weiming Theh
- [All Around The World: The Common Crawl Dataset](https://labs.watchtowr.com/all-around-the-world-the-common-crawl-dataset/) - published 2022-10-09, by Aliz Hammond
- [The Perils of Expired Domains: We're Reading Your Email](https://labs.watchtowr.com/the-perils-of-expired-domains-were-reading-your-email/) - published 2022-08-23, by Benjamin Harris
- [Seasons In The Abyss -  Diving into OpenVPN Access Server](https://labs.watchtowr.com/fun-things-in-openvpn-access-server/) - published 2022-08-04, by Aliz Hammond
- [1x Enterprise IAM vs 1x Slanty Boi](https://labs.watchtowr.com/openam-cve-2022-34298/) - published 2022-07-01, by Aliz Hammond

## Pages

- [Disclosed Vulnerabilities](https://labs.watchtowr.com/disclosed-vulnerabilities/)
- [Vulnerability Disclosure Policy](https://labs.watchtowr.com/vulnerability-disclosure-policy/)