Advisory

Security Advisories

Original vulnerability research from the Payatu team, responsibly disclosed across mobile, web, connected devices, AI/ML products, hardware, firmware, and alot more.

100+

CVEs Disclosed

240+

Blogs & Write-ups

200+

Talks & Trainings

15+

Years of Research and Engagements
Red circular arrow icon indicating refresh or reload action on a transparent background.
Domain
Vulnerability Type
Severity
Black circular refresh icon with arrow pointing counterclockwise, symbolizing reset or reload.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Grid
List

Stored Cross Site Scripting (XSS) in WordPress Clicksold IDX Plugin <= 1.90

Stored Cross Site Scripting (XSS) in chatWindow functionality in WordPress Clicksold IDX Plugin <= 1.90 The plugin does not sanitise and escape some of its settings, which could allow high privilege…
Web / CMS
Cross-Site Scripting (XSS)
CWE-79
2025-08-25
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Stored Cross Site Scripting (XSS) in WordPress Simple Share Plugin <=0.5.3

Stored Cross Site Scripting (XSS) in Simple Share Plugin <=0.5.3 The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
Web / CMS
Cross-Site Scripting (XSS)
CWE-79
2025-08-25
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

XSS in admiror gallery 5.2.0

xss in admiror gallery 5.2.0 The Application does not sanitize or escape AG_responseType parameter, making it vulnerable to reflected cross-site scripting attacks (XSS) when a victim opens the…
Web / CMS
Cross-Site Scripting (XSS)
CWE-79
2023-08-16
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

SQL Injection in Hikeshop via data[order][payment] parameter version < 4.7.3

SQL Injection in Hikeshop via data[order][payment] parameter version < 4.7.3 The Application does not sanitize or escape data[order][payment] parameter, making it vulnerable to sql injection.
Web / CMS
SQL / NoSQL Injection
CWE-89
2023-08-16
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

SQL injection in online virtual classroom via cid parameter

SQL injection in online virtual classroom via cid parameter The Application does not sanitize or escape cid parameter, making it vulnerable to sql injection.
Web / CMS
SQL / NoSQL Injection
CWE-89
2023-08-16
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

SQL Injection in Proforms Basic via sort_order parameter

SQL Injection in Proforms Basic via sort_order parameter The Application does not sanitize or escape sort_order parameter, making it vulnerable to sql injection.
Web / CMS
SQL / NoSQL Injection
CWE-89
2023-08-16
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

SQL Injection in Creative Gallery via id parameter

SQL Injection in Creative Gallery via id parameter The Application does not sanitize or escape id parameter, making it vulnerable to sql injection.
Web / CMS
SQL / NoSQL Injection
CWE-89
2023-08-16
Critical
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Unvalidated open redirection Fuge CMS v1.0

Unvalidated open redirection Fuge CMS v1.0 The vulnerability exists in the file https://github.com/fuge/cms/blob/master/src/foo/core/action/front/ProcessAct.java where application is taking
Web / CMS
Spoofing
CWE-601
2023-07-20
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.

Unvalidated redirection vulnerability in Fuge CMS v1.0

Unvalidated redirection vulnerability in Fuge CMS v1.0 The vulnerability exists in the file https://github.com/fuge/cms/blob/master/src/foo/cms/action/member/RegisterAct.java where application is
Web / CMS
Spoofing
CWE-601
2023-07-20
Medium
IoT text with radio waves icon, symbolizing Internet of Things technology.
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
Black triangular area covering the bottom left corner extending diagonally to the top right edge on a white background.
Medium

Lack of Bluetooth LE pairing and access control in Dr.Trust ECG/EKG Pen

Medical Devices
Hardware / Firmware Exposure
Authentication & Access Bypass
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-15486
2022-10-03
Medium

HiveMQ MQTT broker - XSS Over MQTT

IoT & Hardware
Cross-Site Scripting (XSS)
CWE-79
CWE-79
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-13821
CWE-79
2022-10-03
High

CSRF leads to pages deletion (CVE-2020-25263)

Web / CMS
Authentication & Access Bypass
CWE-352
CWE-352
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-25263
CWE-352
2022-10-03
Medium

CSRF leads to pages deletion (CVE-2020-25262)

Web / CMS
Authentication & Access Bypass
CWE-352
CWE-352
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-25262
CWE-352
2022-10-03
Critical

Remote Code Execution In JsonPickle Python Module

Developer Tools & Libraries
Remote Code Execution
CWE-502
CWE-502
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-22083, CVE-2021-35951
CWE-502
2022-10-03
Medium

Safari video permission spoof

Browser
Authentication & Access Bypass
CWE-281
CWE-281
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-9781
CWE-281
2022-10-03
Critical

Trendnet wireless camera buffer overflow vulneribility

IoT & Hardware
Memory Corruption
CWE-787
CWE-787
October 3, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2020-12763
CWE-787
2022-10-03
Medium

Firefox IOS QR Code Reader XSS

Browser
Cross-Site Scripting (XSS)
CWE-79
CWE-79
October 2, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2019-17003
CWE-79
2022-10-02
Medium

Microsoft Edge Elevation of Privilege Vulnerability

Browser
Authentication & Access Bypass
CWE-863
CWE-863
October 2, 2022
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.
CVE-2019-0678
CWE-863
2022-10-02
See it in action

Watch the exploit

Our researchers demonstrating the vulnerabilities they found the working chain, start to finish, on the real device.
Person in a black polo shirt with Payatu logo standing against a red-orange gradient background with the SolarWinds logo and text 'SAML 2.0 Authentication Bypass' on the left.
Dhabaleshwar Das Finds Critical SolarWinds SAML Authentication Bypass | CVE-2026-28323
Dhableshwar Das
White play button icon inside a solid red circle.Man in a black polo shirt with Payatu logo stands smiling against a dark purple gradient background with a green stylized circuit board icon and text saying 'Path Traversal in Binwalk WinCE Extraction'.
The Security Tool That Became the Attack Surface
Dhableshwar Das
White play button icon inside a solid red circle.
Go deeper

The full story

An advisory tells you what broke. These write-ups tell you how we found it, why the patch held, and what it means for your own stack.
Application Security
How a Double-Encoded Null Byte Turns a ZIP File into an XSS Vector – CVE-2026-2790
April 24, 2026
10 min
Application Security
Security leaders
Researchers
For Security Leaders
Browser Security
Security Operations Center (SOC)
The Chrome Extension That Stole the CEO’s Cookies: A Confession on AI, Trust, and Supply Chain Security
May 8, 2026
10 min
Browser Security
Security Operations Center (SOC)
Researchers
Security leaders
For Security Leaders
IoT & hardware
Exploit dev & reverse engineering
Binwalk Path Traversal Vulnerability: Turning Firmware Analysis into Code Execution
June 10, 2026
8 min
IoT & hardware
Exploit dev & reverse engineering
Security leaders
Researchers
For Security Leaders
Research & disclosures
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

These CVEs started as someone's untested product

Get the same research depth pointed at your firmware, app or cloud before it ships.

Book an assessment
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.