Vulnerabilityresearch
One bug, taken to its conclusion. The unauthenticated write, the wormable RDP, the scoring fight over what it is really worth.
Deep dives into single vulnerabilities - the primitive, the exploit path, and the patch gap attackers actually used.
The track log
what's on fileField reports
6 in this track // newest firstCVE-2026-104286: One Unauthenticated File Write, Preloaded Into Every Process on a FortiMail Box
CVE-2026-104286 is an unauthenticated arbitrary file write in FortiMail's GUI, published as FG-IR-26-175 on 1 October…
Open report →One Bug, Two Official CVSS Scores: CVE-2025-25249, PivotC2, and the 1.7 Points That Decide Whether Anyone Gets Paged
NVD scored CVE-2025-25249 at 9.8. Fortinet, the CNA that assigned it, scored it 8.1. The whole gap is one metric -…
Open report →EchoLeak: Four Defences, Four Bypasses, and What Zero-Click Prompt Injection Says About Filtering an Unconstrained Capability
CVE-2025-32711 let an attacker email a target once, never interact again, and have Microsoft 365 Copilot exfiltrate…
Open report →BlueKeep: The Wormable RDP Vulnerability That Kept the Security World Up at Night
CVE-2019-0708 was a pre-authentication RCE in Windows RDP - no credentials required, SYSTEM-level access, affecting…
Open report →PrintNightmare: How an Accidental GitHub Post Handed Ransomware Gangs a Domain Takeover 0-Day
In June 2021, researchers accidentally published a PoC for an unpatched Windows Print Spooler RCE before taking it…
Open report →Follina: The Zero-Day That Let Word Documents Execute Code Without Macros
Follina (CVE-2022-30190) allowed code execution by opening a Word document - no macros, no enabling required. The…
Open report →Track console
shell // guest sessionTry help, random, latest, grep <term>, or count.