CVE-2025-49113 is a fascinating PHP Object injection in Roundcube webmail, a really nice find by the original finder. #roundcube #cve-2025-49113 #rce
Latest posts 5
New from us! Testing a Rails + Nginx app? This should be in your checklist. Read the blog to know how we disclosed Discourse database backups!
New Blogpost - We identified a vulnerability in Discourse where a misconfiguration in Rails send_file + Nginx's internal directive can expose database backups!
projectdiscovery.io/blog/discourse…
This issue isn't limited to Discourse. It can affect other Rails + Nginx apps with similar configurations.
Read our full analysis and detect it with our Nuclei template, now live on ProjectDiscovery Cloud!View quoted post on X
Check out our latest blog post! We dive into GitHub Enterprise’s SAML implementation and explore an authentication bypass in encrypted assertion mode.
CVE-2024-4985 / CVE-2024-9487: GitHub Enterprise SAML Authentication Bypass.
projectdiscovery.io/blog/github-en…
CVE-2024-4985 / CVE-2024-9487: GitHub Enterprise SAML Authentication Bypass.
projectdiscovery.io/blog/github-en…
projectdiscovery.io GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487) — ProjectDiscovery Blog Introduction In light of the recent Ruby-SAML bypass discovered in GitLab, we set out to examine the SAML implementation within GitHub Enterprise. During our research, we identified a significant... Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass.
CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab
blog.projectdiscovery.io/ruby-saml-gitl…
CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab
blog.projectdiscovery.io/ruby-saml-gitl…
0:33
Enjoy our next blog post this time an SQL Injection on Apple’s Infra. Another win nets us a $25,000 bounty! 💻💰 #AppleSecurity #Research #bugbountytips #bugbounty
blog.projectdiscovery.io/hacking-apple-…
blog.projectdiscovery.io/hacking-apple-…
Check out our latest research blog, including detailed overview of how we discovered an SQL injection vulnerability (+ nuclei template) in Masa/Mura CMS and Hacked into Apple's Infrastructure.View quoted post on X
blog.projectdiscovery.io/hacking-apple-…
#AppleSecurity #Research #CyberSecuirty #BugBounty
