Advisory

Security Advisories

Original vulnerability research from the Payatu team, responsibly disclosed across mobile, web, connected devices, AI/ML products, hardware, firmware, and alot more.

100+

CVEs Disclosed

240+

Blogs & Write-ups

200+

Talks & Trainings

15+

Years of Research and Engagements
Red circular arrow icon indicating refresh or reload action on a transparent background.
Domain
Vulnerability Type
Severity
Black circular refresh icon with arrow pointing counterclockwise, symbolizing reset or reload.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Grid
List

Code Injection in pytorch-lightning prior to 1.6.0

Code Execution in the context of the program can be achieved in pytorch-lightning prior to v1.6.0 It is possible to execute OS commands or snippets of python code in the context of the program by…
Developer Tools & Libraries
Remote Code Execution
CWE-94
2022-10-05
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Lack of Bluetooth LE pairing and access control in Fastrack reflex 2.0 activity tracker

Lack of Bluetooth LE pairing and access control Time, date, and month on the smartwatch It was identified on analyzing the Bluetooth LE Characteristics of the device that, on handle 0x0017 the value…
IoT & Hardware
Hardware / Firmware Exposure
Authentication & Access Bypass
2022-10-05
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Unauthenticated Firmware Update in Fastrack Reflex 2.0 Activity Tracker

Unauthenticated Firmware Update It was identified on analyzing the Bluetooth LE Characteristics of the device that it is using Nordic DFU 0.1 and has no signature verification for OTA Firmware…
IoT & Hardware
Hardware / Firmware Exposure
2022-10-04
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Denial of service (Device Crashing) on Fastrack reflex 2.0 activity tracker

Fuzzing characteristic value leads to Device crash It was identified Fuzzing char value last 3 bytes of the watch was getting crashed after 5 minutes it restarts, Bluetooth doesn’t work and doesn’t…
IoT & Hardware
Denial of Service
2022-10-04
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Open Serial debug port Allows Dumping, and re-flashing Firmware in Fastrack reflex 2.0 activity tracker

Open Serial debug port Allows Dumping, and re- flashing Firmware It was identified in analyzing the PCB, that the SWD (Serial Wire Debug) the port was open and it gives access to the dumping and…
IoT & Hardware
Hardware / Firmware Exposure
2022-10-04
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

DoS in aedes MQTT broker

DoS on aedes broker because of incorrect error handling A specifically crafted payload which has published header and message length as 0 is sent to the server which crashes the server because of the…
IoT & Hardware
Denial of Service
CWE-755
2022-10-03
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Safari Login AutoFill

Safari Login AutoFill A malicious attacker may cause Safari to suggest a password for the wrong domain
Browser
Spoofing
CWE-346
2022-10-03
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Safari reader download permission bypass

Safari reader download permission bypass A malicious attacker may be able to change the origin of a frame for a download in Safari Reader mode
Browser
Authentication & Access Bypass
2022-10-03
Low
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Safari reader same origin policy (SOP) bypass

Safari reader same origin policy (SOP) bypass An issue in Safari Reader mode may allow a remote attacker to bypass the Same Origin Policy
Browser
Authentication & Access Bypass
2022-10-03
High
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.
Medium

Safari Address Bar Spoof

Browser
Spoofing
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-3833
2022-10-03
Medium

massCode Code execution

Developer Tools & Libraries
Cross-Site Scripting (XSS)
CWE-79
CWE-79
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-8548
CWE-79
2022-10-03
Medium

Reflected XSS in GTranslate wordpress plugin

Web / CMS
Cross-Site Scripting (XSS)
CWE-79
CWE-79
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-11930
CWE-79
2022-10-03
Critical

WebKit - AXObjectCache - m_deferredFocusedNodeChange - UaF

Browser
Memory Corruption
CWE-416
CWE-416
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-10018
CWE-416
2022-10-03
Medium

Apache Artemis - XSS Over MQTT

IoT & Hardware
Cross-Site Scripting (XSS)
CWE-79
CWE-79
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-13932
CWE-79
2022-10-03
High

Lack of Medical data encryption and integrity in Niscomed Multipara Patient Monitor

Medical Devices
Information Disclosure
CWE-312
CWE-312
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-15484
CWE-312
2022-10-03
High

Unauthenticated telnet service in niscomed patient Monitor

Medical Devices
Authentication & Access Bypass
CWE-287, CWE-319
CWE-287, CWE-319
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-15482
CWE-287, CWE-319
2022-10-03
Medium

Unautenticated UART port in niscomed patient monitoring device

Medical Devices
Hardware / Firmware Exposure
Authentication & Access Bypass
CWE-306
CWE-306
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-15483
CWE-306
2022-10-03
Medium

Lack of Medical data encryption in Dr.Trust ECG/EKG Pen

Medical Devices
Information Disclosure
CWE-312
CWE-312
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-15485
CWE-312
2022-10-03
See it in action

Watch the exploit

Our researchers demonstrating the vulnerabilities they found the working chain, start to finish, on the real device.
Person in a black polo shirt with Payatu logo standing against a red-orange gradient background with the SolarWinds logo and text 'SAML 2.0 Authentication Bypass' on the left.
Dhabaleshwar Das Finds Critical SolarWinds SAML Authentication Bypass | CVE-2026-28323
Dhableshwar Das
White play button icon inside a solid red circle.Man in a black polo shirt with Payatu logo stands smiling against a dark purple gradient background with a green stylized circuit board icon and text saying 'Path Traversal in Binwalk WinCE Extraction'.
The Security Tool That Became the Attack Surface
Dhableshwar Das
White play button icon inside a solid red circle.
Go deeper

The full story

An advisory tells you what broke. These write-ups tell you how we found it, why the patch held, and what it means for your own stack.
Application Security
How a Double-Encoded Null Byte Turns a ZIP File into an XSS Vector – CVE-2026-2790
April 24, 2026
10 min
Application Security
Security leaders
Researchers
For Security Leaders
Browser Security
Security Operations Center (SOC)
The Chrome Extension That Stole the CEO’s Cookies: A Confession on AI, Trust, and Supply Chain Security
May 8, 2026
10 min
Browser Security
Security Operations Center (SOC)
Researchers
Security leaders
For Security Leaders
IoT & hardware
Exploit dev & reverse engineering
Binwalk Path Traversal Vulnerability: Turning Firmware Analysis into Code Execution
June 10, 2026
8 min
IoT & hardware
Exploit dev & reverse engineering
Security leaders
Researchers
For Security Leaders
Research & disclosures
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

These CVEs started as someone's untested product

Get the same research depth pointed at your firmware, app or cloud before it ships.

Book an assessment
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.