Richard Warren- 16 Oct, 2026
Ivanti Connect Secure - Custom Sign-in Page Template Injection RCE
A bypass of the CVE-2020-8243 template injection patch gives authenticated admins RCE on Ivanti Connect Secure.
Read Article-
Richard Warren
- 14 Oct, 2026
Help Yourself to SYSTEM
Escalating privileges with Intune Company Portal and NSIS installer bugs.
Read Article
Jake Bolam- 14 Sep, 2026
A Peripheral Path to SYSTEM - Exploiting Logi Options+ for SYSTEM Shells
Introduction Logitech Options Plus is widely used to configure and manage Logitech peripherals, and like many pieces of software it includes a …
Read Article-
Richard Warren
- 27 Aug, 2026
SonicWall GMS - Unauthenticated RCE and Encrypted Password Hash Extraction (CVE-2026-66145)
SonicWall patched our bugs. We checked. They didn’t.
Read Article-
Richard Warren
- 21 Aug, 2026
Tag, You're Managed - Executing Code via Google's Own Signed Installer
Code execution via a Google-signed Chrome MSI.
Read Article
David Cash- 18 Aug, 2026
NachoMDM - Weaponising Windows MDM for UAC Bypass and SYSTEM Execution via Malicious Enrollment
Summary In modern enterprise environments, Mobile Device Management (MDM) allows organisations to enforce policies, deploy software, and maintain …
Read Article