Blog
The cyber security blog where research and innovation are shared
Analysis of XXE 0days in PHPSpreadsheet < 3.4.0
12/03/2025We deep-dive into how it has been possible to find two XXE 0day vulnerabilities in PHPSPreadsheet, bypassing the actual defences and subsequent fixes.
How to request a CVE for a vulnerability
18/03/2024Submit a new CVE may not be so intuitive. In this article we look at all the steps and answer common questions.
OSINT Challenge #2 – The ideal house
20/10/2023We are using Open Source INTelligence (OSINT) to show how to find the address of the house by using its pictures in a real estate advertisement.
OSINT Challenge #1 – Can you tell where it is?
21/09/2023We are using Open Source INTelligence (OSINT) to show how it is possible to determine the exact location where a picture was taken.
Analysis of CVE-2022-23093 (FreeBSD Ping Stack Overflow)
24/05/2023We are analyzing CVE-2022-23093, step by step, to eventually answer the question: is it possible to get RCE, or not?
How the guests of a hotel were scammed
17/02/2023Unlock Security intervened to look into repeated scams against the guests of a hotel. This is how the scammer stole the reservation details.
