• 30 Jul 2026

  Unauthenticated zero-click remote crash of the full [Brave](https://brave.com/) browser process
• 28 Jul 2026

  Heap buffer overflow in [jq](https://jqlang.github.io/jq/)
• 28 Jul 2026

  Denial of service and silent data-loss in [jq](https://jqlang.github.io/jq/)
• 27 Nov 2018

  Aeternity - Remote Code Execution in epoch via erlang distribution port
• 20 Nov 2018

  Duplicating work shares in Amoveo mining pools
• 12 Nov 2018

  Amoveo blockchain RCE via erlang distribution port
• 27 Feb 2017

  Ruby Gem RubyZip Path Traversal
• 29 Jan 2017

  Ruby Gem Minitar Path Traversal
• 19 Jan 2017

  XSS in Repo.js via filename
• 11 Jul 2016

  HTML injection on Hipchat login page (SEC-828)
• 28 Jun 2016

  Rocket.Chat SSRF in links preview and privilege escalation via misconfigured MongoDB
• 10 Jan 2016

  Hashicorp Vagrant Remote Code Execution via insecure image download
• 20 Dec 2015

  XSS in Grafana piechart-panel
• 20 Oct 2014

  XSS in Confluence via shortcut links
• 18 Oct 2014

  Hijacking Google Calendar events and other missing access controls
• 01 Sep 2014

  Multiple critical vulnerabilities in Lifesize Conference Room System
• 16 May 2014

  Hipchat SSRF in addons
• 14 May 2014

  XSS in Hipchat history search
• 24 Feb 2014

  Code execution in nw.js: bypassing nwdisable in file:// and app:// frames
• 09 Dec 2013

  Multiple vulnerabilities in Eventbrite