My Publications

4 posts

Jun 12, 20227 min read
Hacking 6.5+ million websites => CVE-2022-29455 (Elementor)
Please upgrade your Elementor websites
May 11, 20217 min read
SSRF in Open Distro for Elasticsearch
CVE-2021-31828
Oct 26, 20205 min read
Developers, Please encode your URLs
If you like it, put a # on it!
Sep 24, 20207 min read
NGINX may be protecting your applications from traversal attacks without you even knowing
By Danny Robinson and Rotem Bar