Mark Puckett

November 18, 2022

Raxis demonstrates how to obtain a remote shell on a target system using a Log4j[…]

Brad Herring

October 31, 2022

In the cyberworld, news of a critical vulnerability affecting OpenSSL versions 3.0 – 3.0.6 will[…]

Raxis Administrator

October 21, 2022

This CSS vulnerability, discovered by Raxis lead penetration tester Matt Mathur, lies in a device’s[…]

Raxis Administrator

July 21, 2022

Raxis lead penetration tester Matt Dunn uncovers two more ManageEngine vulnerabilities (CVE-2022-26653 & CVE-2022-26777).

Raxis Administrator

July 6, 2022

Matt Dunn discovers another ManageEngine vulnerability, this one in the Support Center Plus application.

Raxis Administrator

June 7, 2022

Raxis lead penetration tester Matt Dunn discovers an information leakage vulnerability in ManageEngine’s Asset Explorer

Andrew Trexler

May 26, 2022

The Dirty Pipe vulnerability (CVE-2022-0847) allows any user to write to read-only files, including files[…]

Raxis Administrator

May 17, 2022

Raxis lead penetration tester Matt Dunn continues his prolific discovery of new cross-site scripting CVEs.[…]

Brad Herring

April 1, 2022

In this post, Raxis VP Brad Herring explains how web proxy tools can turn even[…]

Raxis Administrator

November 12, 2021

In this second in a series, learn how to perform Cross-Site Scripting (XSS) attacks such[…]

Raxis Administrator

October 8, 2021

In this blog post, Raxis lead penetration tester Mark Fabian discusses broken access control and[…]

Raxis Administrator

September 24, 2021

The latest draft of the OWASP Top 10 has been released. Though injection is now[…]