Black Lantern Security (BLSOPS)

CVE-2026-12118 - IBM webMethods Integration Server: Pre-Auth RCE via WmServiceMock

Bring Your Own Bytecode

Jul 21 • Micheal Reski, Jacob Holvick, Daniel Mansur, and Chris Grigsby

2

June 2026

April 2026

Artificial Foolishness: The Hidden Dangers of External-Facing LLMs

The rise of AI opens more doors to attackers

Apr 6 • Kyle Griffin

6

2

March 2026

Amelia Booking Pro ≤ 9.1.2: Authenticated Customer-to-Admin Password Reset via IDOR

CVE-2026-2931

Mar 26 • Hunter Jensen

February 2026

CVE-2026-2103 - Infor Syteline ERP

Infor Syteline ERP

Feb 6 • Micheal Reski, Jacob Holvick, and Daniel Mansur

1

1

November 2025

CVE-2025-12463— 9.8 Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras

Smile, you’re on camera.

Nov 3, 2025 • Jack Pas

3

September 2025

TecCom TecConnect 4.1 XML External Entity (XXE)

CVE-2025-10183

Sep 9, 2025 • Kyle Griffin

4

June 2025

Doomla! Zero Days

Discovery and Exploitation of two Zero Days from the perspective of a first year Penetration Tester.

Jun 11, 2025 • Jack Pas

4

1

1

May 2025

ASP.NET Cryptography for Pentesters

This article was originally posted to blog.liquidsec.net on June 1, 2021.

May 2, 2025 • Paul Mueller

1

March 2025

CVE-2025-1888—Reflected XSS in Aperio Eslide Manager

The Aperio Eslide Manager application is vulnerable to reflected cross-site scripting (XSS), which primarily affects the Leica Web Viewer within the…

Mar 14, 2025 • Mark Gaddy

September 2023

XSS and SQLi in Forecast® by Tideworks

Tideworks: CVE-2022-43112 & CVE-2022-43115: Forecast® (10.10.0.13153)

Sep 19, 2023 • Jacob Holvick

July 2023

CVE-2023-3433 & CVE-2023-3434 - Jami Local Denial Of Service and Passing Strings to QRC URL Vulnerabilities

Public Disclosure of 2 Vulnerabilities found within GNU Jami (Multiple Versions)

Jul 14, 2023 • Mason Corkern