All articles
- CVE-2026-14850: Arbitrary Password Reset in MobiAPParc
- Little rant about Pre-Account Takeover
- When a Password Reset Is Not Enough: Discovering Inconsistent Session Revocation in Galaxus
- CVE-2026-48117 - Account Takeover via Pre-Registration Attack in DroneAware Node
- How Not to Enforce Device-Limited Content
- u5CMS: Session Forgery, Privilege Escalation, and RCE
- Garmin MapShare: Insecure Link Design and User Data Privacy (Part 2)
- Garmin inReach Security: Insecure Link Design and User Data Privacy (Part I)