Advisory

Security Advisories

Original vulnerability research from the Payatu team, responsibly disclosed across mobile, web, connected devices, AI/ML products, hardware, firmware, and alot more.

100+

CVEs Disclosed

240+

Blogs & Write-ups

200+

Talks & Trainings

15+

Years of Research and Engagements
Red circular arrow icon indicating refresh or reload action on a transparent background.
Domain
Vulnerability Type
Severity
Black circular refresh icon with arrow pointing counterclockwise, symbolizing reset or reload.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Grid
List

Lack of Bluetooth LE pairing and access control in Dr.Trust ECG/EKG Pen

Lack of Bluetooth LE pairing and access control on internal data.
Medical Devices
Hardware / Firmware Exposure
Authentication & Access Bypass
2022-10-03
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

HiveMQ MQTT broker - XSS Over MQTT

Stored XSS on the HiveMQ Broker management console An issue was discovered on HiveMQ MQTT Broker, The client id of any connected device is not sanitized for XSS in the admin console leading to stored…
IoT & Hardware
Cross-Site Scripting (XSS)
CWE-79
2022-10-03
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

CSRF leads to pages deletion (CVE-2020-25263)

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.
Web / CMS
Authentication & Access Bypass
CWE-352
2022-10-03
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

CSRF leads to pages deletion (CVE-2020-25262)

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.
Web / CMS
Authentication & Access Bypass
CWE-352
2022-10-03
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Remote Code Execution In JsonPickle Python Module

Remote Code Execution in jsonPickle python module jsonpickle <= 1.4.2 versions allows remote code execution during deserialization of a malicious payload through the decode() function.
Developer Tools & Libraries
Remote Code Execution
CWE-502
2022-10-03
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Safari video permission spoof

Safari video permission spoof Using this vulnerability an attacker can trick the victim to grant website permissions to a website they didn’t intend to
Browser
Authentication & Access Bypass
CWE-281
2022-10-03
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Trendnet wireless camera buffer overflow vulneribility

TrendNet wireless camera buffer overflow vulneribility TrendNet ProView Wireless camera TV-IP512WN (version v1.0R) is vulnerable to buffer overflow in handling RTSP packet in firmware version 1.0.4…
IoT & Hardware
Memory Corruption
CWE-787
2022-10-03
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Firefox IOS QR Code Reader XSS

Firefox IOS QR Code Reader XSS This vulnerability allows an attacker to steal victim’s cookies, personal data and other valuable information from different origins just by scanning a QR code
Browser
Cross-Site Scripting (XSS)
CWE-79
2022-10-02
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Microsoft Edge Elevation of Privilege Vulnerability

Microsoft Edge Elevation of Privilege Vulnerability This vulnerability allows an attacker to execute javascript code on every host without the permission, also an attacker can steal local system…
Browser
Authentication & Access Bypass
CWE-863
2022-10-02
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.
High

Mozilla Firefox Same-Origin Policy Bypass via JAR URI Handling

Browser
Spoofing
CWE-346
CWE-346
March 17, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2026-2790
CWE-346
2026-03-17
Medium

UART port of the Wi-Fi module controller is open to access

IoT & Hardware
Hardware / Firmware Exposure
Information Disclosure
CWE-200
CWE-200
January 16, 2026
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-67399
CWE-200
2026-01-16
High

Bluetooth Classic LMP Handle Flaw Exploitation

Automotive
Denial of Service
CWE-404
CWE-404
December 15, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-63895
CWE-404
2025-12-15
High

Wireless Key Stroke Injection on vehicle Infotainment

Automotive
Authentication & Access Bypass
CWE-306
CWE-306
December 8, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-63896
CWE-306
2025-12-08
High

Wi-Fi De-Authentication of Connected Clients in Waveshare RS232/485 TO WIFI ETH (B)

IoT & Hardware
Authentication & Access Bypass
CWE-284, CWE-300
CWE-284, CWE-300
November 12, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-63363
CWE-284, CWE-300
2025-11-12
High

Cleartext Transmission of Administrator Credentials via HTTP Basic Authentication on Waveshare RS232/485 TO WIFI ETH (B)

IoT & Hardware
Information Disclosure
CWE-319
CWE-319
November 12, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-63364
CWE-319
2025-11-12
Critical

Authentication Bypass via Blank Credentials in Waveshare RS232/485 TO WIFI ETH (B)

IoT & Hardware
Authentication & Access Bypass
CWE-620
CWE-620
November 12, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-63362
CWE-620
2025-11-12
Medium

Administrator Password Displayed in Plaintext on Waveshare RS232/485 TO WIFI ETH (B)

IoT & Hardware
Information Disclosure
CWE-522
CWE-522
November 12, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-63361
CWE-522
2025-11-12
High

Unprotected Transport of Credentials on Murrelektronik Impact67 Pro

IoT & Hardware
Information Disclosure
CWE-319
CWE-319
November 9, 2025
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2025-41718
CWE-319
2025-11-09
See it in action

Watch the exploit

Our researchers demonstrating the vulnerabilities they found the working chain, start to finish, on the real device.
Person in a black polo shirt with Payatu logo standing against a red-orange gradient background with the SolarWinds logo and text 'SAML 2.0 Authentication Bypass' on the left.
Dhabaleshwar Das Finds Critical SolarWinds SAML Authentication Bypass | CVE-2026-28323
Dhableshwar Das
White play button icon inside a solid red circle.Man in a black polo shirt with Payatu logo stands smiling against a dark purple gradient background with a green stylized circuit board icon and text saying 'Path Traversal in Binwalk WinCE Extraction'.
The Security Tool That Became the Attack Surface
Dhableshwar Das
White play button icon inside a solid red circle.
Go deeper

The full story

An advisory tells you what broke. These write-ups tell you how we found it, why the patch held, and what it means for your own stack.
Application Security
How a Double-Encoded Null Byte Turns a ZIP File into an XSS Vector – CVE-2026-2790
April 24, 2026
10 min
Application Security
Security leaders
Researchers
For Security Leaders
Browser Security
Security Operations Center (SOC)
The Chrome Extension That Stole the CEO’s Cookies: A Confession on AI, Trust, and Supply Chain Security
May 8, 2026
10 min
Browser Security
Security Operations Center (SOC)
Researchers
Security leaders
For Security Leaders
IoT & hardware
Exploit dev & reverse engineering
Binwalk Path Traversal Vulnerability: Turning Firmware Analysis into Code Execution
June 10, 2026
8 min
IoT & hardware
Exploit dev & reverse engineering
Security leaders
Researchers
For Security Leaders
Research & disclosures
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

These CVEs started as someone's untested product

Get the same research depth pointed at your firmware, app or cloud before it ships.

Book an assessment
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.