Proof you can check yourself.
We would rather show you verifiable work than a wall of client logos. Below are credited CVEs, each linking to the vendor advisory and the public NVD record. Follow them and confirm the work is real.
Published CVEs
- CVE-2020-14723Oracle Fusion Middleware, Stored XSS
Stored cross-site scripting in Oracle Fusion Middleware, fixed in the Oracle July 2020 Critical Patch Update.
- CVE-2020-14444WSO2 Identity Server, Reflected XSS
Cross-site scripting in the WSO2 Identity Server policy administration UI (through 5.9.0).
- CVE-2020-14445WSO2 Identity Server, XSS / open redirect
Input-validation flaw in the WSO2 Identity Server leading to cross-site scripting / open redirect.
- CVE-2020-14446WSO2 Identity Server, Open redirect
Open redirect in the WSO2 Identity Server that could be abused to send users to an attacker-controlled destination.
Research credited through CybersecurityWorks Research Labs.
Write-ups and tools
Technical write-ups, tool documentation and talks are published here as they are released. The CVE record above is the current, verifiable proof.
Want this rigour on your systems?
The same approach that finds vendor CVEs is what we bring to an engagement. Tell us what you want tested.