Advisory

Security Advisories

Original vulnerability research from the Payatu team, responsibly disclosed across mobile, web, connected devices, AI/ML products, hardware, firmware, and alot more.

100+

CVEs Disclosed

240+

Blogs & Write-ups

200+

Talks & Trainings

15+

Years of Research and Engagements
Red circular arrow icon indicating refresh or reload action on a transparent background.
Black circular refresh icon with arrow pointing counterclockwise, symbolizing reset or reload.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

SAML 2.0 Authentication Bypass in SolarWinds Web Help Desk

Successful exploitation allows a remote unauthenticated attacker to bypass SAML authentication and impersonate an existing privileged user.
Enterprise & Mobile
Authentication & Access Bypass
CWE-287
2026-07-30
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Extplorer Component up to 2.1.15 on Joomla cross site scripting

Successful exploitation allows an attacker to inject malicious JavaScript into a specially crafted URL.
Web / CMS
Cross-Site Scripting (XSS)
CWE-79
2026-07-07
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Extension - advcomsys.com - XSS in oneVote component for Joomla <= 1.7.0

Successful exploitation allows an attacker to craft malicious input that executes JavaScript in a victim's browser if the victim interacts with the malicious content.
Web / CMS
Cross-Site Scripting (XSS)
CWE-79
2026-07-08
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

CVE-2026-8971: Mozilla Firefox Same-Origin Policy Bypass via JAR URI Null Byte Handling

Exploitation occurs when a target loads a specifically crafted jar:, resource:///, or moz-extension:// URI, whether through direct navigation, a redirect served by attacker controlled web content, or…
Browser
Spoofing
CWE-158, CWE-346
2026-06-17
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Code Injection Vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary client-side code in the browsers of users accessing the affected SAP NetWeaver functionality.
Enterprise & Mobile
Remote Code Execution
CWE-94
2026-06-03
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Path Traversal in Binwalk WinCE Extraction Leading to Arbitrary File Write and Code Execution

This vulnerability allows an attacker to craft a malicious firmware image that writes files outside the intended extraction directory when processed by a vulnerable Binwalk installation.
Developer Tools & Libraries
Remote Code Execution
CWE-22
2026-05-27
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Static GPS spoofing on Infotainment System

Successful exploitation of this vulnerability allows an attacker to spoof a static GPS location on the JXL Infotainment System, causing the system to consistently display incorrect positioning…
Automotive
Spoofing
CWE-941
2026-04-22
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Exposure of Stored Credentials via Open UART Logs and Firmware Dump

This vulnerability allows an attacker with physical access to the device to fully extract the firmware and internal memory contents.
IoT & Hardware
Hardware / Firmware Exposure
Information Disclosure
CWE-200
2026-04-22
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Insecure Deserialization Leading to Arbitrary Code Execution in datrie.Trie

This vulnerability allows a remote attacker to execute arbitrary code on the target system by tricking a victim into loading a malicious .trie file.
Developer Tools & Libraries
Remote Code Execution
CWE-502, CWE-20
2026-04-08
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.
Critical

SAML 2.0 Authentication Bypass in SolarWinds Web Help Desk

Enterprise & Mobile
Authentication & Access Bypass
CWE-287
CWE-287
July 30, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-28323
CWE-287
2026-07-30
Medium

Extplorer Component up to 2.1.15 on Joomla cross site scripting

Web / CMS
Cross-Site Scripting (XSS)
CWE-79
CWE-79
July 7, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2023-40628
CWE-79
2026-07-07
Medium

Extension - advcomsys.com - XSS in oneVote component for Joomla <= 1.7.0

Web / CMS
Cross-Site Scripting (XSS)
CWE-79
CWE-79
July 8, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2023-23756
CWE-79
2026-07-08
High

CVE-2026-8971: Mozilla Firefox Same-Origin Policy Bypass via JAR URI Null Byte Handling

Browser
Spoofing
CWE-158, CWE-346
CWE-158, CWE-346
June 17, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-8971, CVE-2025-1936, CVE-2026-2790
CWE-158, CWE-346
2026-06-17
Medium

Code Injection Vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)

Enterprise & Mobile
Remote Code Execution
CWE-94
CWE-94
June 3, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-27674
CWE-94
2026-06-03
Medium

Path Traversal in Binwalk WinCE Extraction Leading to Arbitrary File Write and Code Execution

Developer Tools & Libraries
Remote Code Execution
CWE-22
CWE-22
May 27, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-7179
CWE-22
2026-05-27
Critical

Static GPS spoofing on Infotainment System

Automotive
Spoofing
CWE-941
CWE-941
April 22, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-69515
CWE-941
2026-04-22
Medium

Exposure of Stored Credentials via Open UART Logs and Firmware Dump

IoT & Hardware
Hardware / Firmware Exposure
Information Disclosure
CWE-200
CWE-200
April 22, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-30613
CWE-200
2026-04-22
Medium

Insecure Deserialization Leading to Arbitrary Code Execution in datrie.Trie

Developer Tools & Libraries
Remote Code Execution
CWE-502, CWE-20
CWE-502, CWE-20
April 8, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-5659
CWE-502, CWE-20
2026-04-08
See it in action

Watch the exploit

Our researchers demonstrating the vulnerabilities they found the working chain, start to finish, on the real device.
Go deeper

The full story

An advisory tells you what broke. These write-ups tell you how we found it, why the patch held, and what it means for your own stack.
Web & API
Mobile
Safari Address Bar Spoof (CVE-2020-3833)
January 29, 2020
2 mins
Web & API
Mobile
Engineers
Researchers
Research & disclosures
Application Security
How a Double-Encoded Null Byte Turns a ZIP File into an XSS Vector – CVE-2026-2790
April 24, 2026
10 min
Application Security
Security leaders
Researchers
For Security Leaders
Browser Security
Security Operations Center (SOC)
The Chrome Extension That Stole the CEO’s Cookies: A Confession on AI, Trust, and Supply Chain Security
May 8, 2026
10 min
Browser Security
Security Operations Center (SOC)
Researchers
Security leaders
For Security Leaders