Source Incite
Remote Code Execution with Spring Properties
JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory
Eat What You Kill :: Pre-authenticated Remote Code Execution in VMWare NSX Manager
IAM Whoever I Say IAM :: Infiltrating VMWare Workspace ONE Access Using a 0-Click Exploit
From Shared Dash to Root Bash :: Pre-Authenticated RCE in VMWare vRealize Operations Manager
ZohOwned :: A Critical Authentication Bypass on Zoho ManageEngine Desktop Central
Unlocking the Vault :: Unauthenticated Remote Code Execution against CommVault Command Center
Chasing a Dream :: Pre-authenticated Remote Code Execution in Dedecms
Pwn2Own Vancouver 2021 :: Microsoft Exchange Server Remote Code Execution
Full Stack Web Attack 2021 :: Zero Day Give Away