41554 blogs · [ { "id": "01a0d55d-bf31-73ee-8723-1dfadfcf45fe", "title": "CVE-2026-84388 - Fortinet FortiPAM Chrome Extension", "url": "https://baldur.dk/blog/CVE-2026-84388/", "published_at": "2026-07-31T22:00:00+00:00" }, { "id": "01a08735-b729-7203-81c6-99da858e7bf2", "title": "RCE in Strix Agent: A practical guide to prompt injections with impact", "url": "https://baldur.dk/strix-ai-pentester-rce.html", "published_at": "2026-05-26T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae0c16041", "title": "RCE in Strix Agent: A practical guide to prompt injections with impact", "url": "https://baldur.dk/blog/strix-ai-pentester-rce/", "published_at": "2026-05-26T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30541e2d4d89", "title": "Fortinet Forticlient EMS RCE CVE-2025-59922 and one IMG tag to rule them all", "url": "https://baldur.dk/fortinet-ems-rce.html", "published_at": "2026-01-13T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae175529e", "title": "Fortinet Forticlient EMS RCE CVE-2025-59922 and one IMG tag to rule them all", "url": "https://baldur.dk/blog/fortinet-ems-rce/", "published_at": "2026-01-13T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30541f1841fc", "title": "Vibecoding and the illusion of security", "url": "https://baldur.dk/vibecoding-and-the-illusion-of-security.html", "published_at": "2025-10-23T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae1d5dd6a", "title": "Vibecoding and the illusion of security", "url": "https://baldur.dk/blog/vibecoding-and-the-illusion-of-security/", "published_at": "2025-10-23T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae2954089", "title": "CVE-2025-32017 - Umbraco Authenticated RCE", "url": "https://baldur.dk/blog/CVE-2025-32017/", "published_at": "2025-02-09T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054200da2de", "title": "CVE-2025-11208 - Google Chrome", "url": "https://baldur.dk/CVE-2025-11208.html", "published_at": "2025-01-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae3296f66", "title": "CVE-2025-11208 - Google Chrome", "url": "https://baldur.dk/blog/CVE-2025-11208/", "published_at": "2025-01-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054202700ea", "title": "Exploiting embedded mitel phones for unauthenticated remote code execution", "url": "https://baldur.dk/embedded-mitel-exploitation.html", "published_at": "2024-04-24T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae334bdd5", "title": "Exploiting embedded mitel phones for unauthenticated remote code execution", "url": "https://baldur.dk/blog/embedded-mitel-exploitation/", "published_at": "2024-04-24T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305420636022", "title": "CVE-2024-31963 - Mitel Vulnerability (Advisory ID 24-0006)", "url": "https://baldur.dk/CVE-2024-31963.html", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305420c58424", "title": "CVE-2024-31964 - Mitel Vulnerability (Advisory ID 24-0007)", "url": "https://baldur.dk/CVE-2024-31964.html", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305421a26e1e", "title": "CVE-2024-31965 - Mitel Vulnerability (Advisory ID 24-0008)", "url": "https://baldur.dk/CVE-2024-31965.html", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054224ce6b1", "title": "CVE-2024-31966 - Mitel Vulnerability (Advisory ID 24-0009)", "url": "https://baldur.dk/CVE-2024-31966.html", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542295c2f7", "title": "CVE-2024-31967 - Mitel Vulnerability (Advisory ID 24-0010)", "url": "https://baldur.dk/CVE-2024-31967.html", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae338e10c", "title": "CVE-2024-31963 - Mitel Vulnerability (Advisory ID 24-0006)", "url": "https://baldur.dk/blog/CVE-2024-31963/", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae3502090", "title": "CVE-2024-31964 - Mitel Vulnerability (Advisory ID 24-0007)", "url": "https://baldur.dk/blog/CVE-2024-31964/", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae3f26bdd", "title": "CVE-2024-31965 - Mitel Vulnerability (Advisory ID 24-0008)", "url": "https://baldur.dk/blog/CVE-2024-31965/", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae49fc5ea", "title": "CVE-2024-31966 - Mitel Vulnerability (Advisory ID 24-0009)", "url": "https://baldur.dk/blog/CVE-2024-31966/", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae50fca3f", "title": "CVE-2024-31967 - Mitel Vulnerability (Advisory ID 24-0010)", "url": "https://baldur.dk/blog/CVE-2024-31967/", "published_at": "2024-03-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305422a33bdc", "title": "The Blind Spots of Automated Web App Assessments", "url": "https://baldur.dk/automated-web-assessment.html", "published_at": "2024-01-01T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae5199410", "title": "The Blind Spots of Automated Web App Assessments", "url": "https://baldur.dk/blog/automated-web-assessment/", "published_at": "2024-01-01T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305422f11596", "title": "NC3 CTF Solutions", "url": "https://baldur.dk/nc3-pwnable.html", "published_at": "2023-12-14T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae5a3657c", "title": "NC3 CTF Solutions", "url": "https://baldur.dk/blog/nc3-pwnable/", "published_at": "2023-12-14T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054232493ce", "title": "Building your first metasploit exploit", "url": "https://baldur.dk/writing-metasploit-exploit.html", "published_at": "2023-11-23T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae6376113", "title": "Building your first metasploit exploit", "url": "https://baldur.dk/blog/writing-metasploit-exploit/", "published_at": "2023-11-23T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305423b8cf68", "title": "WithSecure Elements Vulnerability to isolate all companies", "url": "https://baldur.dk/withsecure-elements-dos.html", "published_at": "2023-11-19T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae7102049", "title": "WithSecure Elements Vulnerability to isolate all companies", "url": "https://baldur.dk/blog/withsecure-elements-dos/", "published_at": "2023-11-19T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305424810dad", "title": "PRTG Remote Code Execution - CVE-2023-32782", "url": "https://baldur.dk/prtg-rce.html", "published_at": "2023-11-01T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae7135850", "title": "PRTG Remote Code Execution - CVE-2023-32782", "url": "https://baldur.dk/blog/prtg-rce/", "published_at": "2023-11-01T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305424a0f413", "title": "CVE-2023-32782 - PRTG RCE", "url": "https://baldur.dk/CVE-2023-32782.html", "published_at": "2023-09-19T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae76236e4", "title": "CVE-2023-32782 - PRTG RCE", "url": "https://baldur.dk/blog/CVE-2023-32782/", "published_at": "2023-09-19T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054253680d5", "title": "CVE-2023-32781 - PRTG RCE", "url": "https://baldur.dk/CVE-2023-32781.html", "published_at": "2023-09-18T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae7a7dd84", "title": "CVE-2023-32781 - PRTG RCE", "url": "https://baldur.dk/blog/CVE-2023-32781/", "published_at": "2023-09-18T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054253d2c91", "title": "CVE-2023-31452 - PRTG CSRF", "url": "https://baldur.dk/CVE-2023-31452.html", "published_at": "2023-09-17T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae7a9f4c6", "title": "CVE-2023-31452 - PRTG CSRF", "url": "https://baldur.dk/blog/CVE-2023-31452/", "published_at": "2023-09-17T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305425c886fa", "title": "CVE-2023-31451 - PRTG File Disclosure with Regex", "url": "https://baldur.dk/CVE-2023-31451.html", "published_at": "2023-09-15T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae7e9ae43", "title": "CVE-2023-31451 - PRTG File Disclosure with Regex", "url": "https://baldur.dk/blog/CVE-2023-31451/", "published_at": "2023-09-15T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054261ece61", "title": "CVE-2023-31450 - PRTG Path Traversal", "url": "https://baldur.dk/CVE-2023-31450.html", "published_at": "2023-09-14T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae8682951", "title": "CVE-2023-31450 - PRTG Path Traversal", "url": "https://baldur.dk/blog/CVE-2023-31450/", "published_at": "2023-09-14T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305426e0e46f", "title": "CVE-2023-31449 - PRTG Path Traversal", "url": "https://baldur.dk/CVE-2023-31449.html", "published_at": "2023-09-12T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae8f58594", "title": "CVE-2023-31449 - PRTG Path Traversal", "url": "https://baldur.dk/blog/CVE-2023-31449/", "published_at": "2023-09-12T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305427934704", "title": "CVE-2023-31448 - PRTG Path Traversal", "url": "https://baldur.dk/CVE-2023-31448.html", "published_at": "2023-09-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae9463b1f", "title": "CVE-2023-31448 - PRTG Path Traversal", "url": "https://baldur.dk/blog/CVE-2023-31448/", "published_at": "2023-09-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542836d01b", "title": "CVE-2023-24037 - Nagios", "url": "https://baldur.dk/CVE-2023-24037.html", "published_at": "2023-09-08T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae9493615", "title": "CVE-2023-24037 - Nagios", "url": "https://baldur.dk/blog/CVE-2023-24037/", "published_at": "2023-09-08T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-305428825561", "title": "CVE-2023-24036 - Nagios", "url": "https://baldur.dk/CVE-2023-24036.html", "published_at": "2023-09-07T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfae9fc114d", "title": "CVE-2023-24036 - Nagios", "url": "https://baldur.dk/blog/CVE-2023-24036/", "published_at": "2023-09-07T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-3054296fecdf", "title": "CVE-2023-24035 - Nagios", "url": "https://baldur.dk/CVE-2023-24035.html", "published_at": "2023-09-06T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaea455889", "title": "CVE-2023-24035 - Nagios", "url": "https://baldur.dk/blog/CVE-2023-24035/", "published_at": "2023-09-06T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542a57efbf", "title": "CVE-2022-45871 - WithSecure fsicapd", "url": "https://baldur.dk/CVE-2022-45871.html", "published_at": "2022-09-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaea987122", "title": "CVE-2022-45871 - WithSecure fsicapd", "url": "https://baldur.dk/blog/CVE-2022-45871/", "published_at": "2022-09-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542ab0500f", "title": "CVE-2022-38165 - F-Secure Policy Manager (Unauthed arbitrary filewrite)", "url": "https://baldur.dk/CVE-2022-38165.html", "published_at": "2022-09-04T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaeb4c2755", "title": "CVE-2022-38165 - F-Secure Policy Manager (Unauthed arbitrary filewrite)", "url": "https://baldur.dk/blog/CVE-2022-38165/", "published_at": "2022-09-04T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542affe231", "title": "CVE-2022-38162 - F-Secure Policy Manager", "url": "https://baldur.dk/CVE-2022-38162.html", "published_at": "2022-08-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaec0245e4", "title": "CVE-2022-38162 - F-Secure Policy Manager", "url": "https://baldur.dk/blog/CVE-2022-38162/", "published_at": "2022-08-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542b095e4e", "title": "CVE-2022-28885 - F-Secure Policy Manager", "url": "https://baldur.dk/CVE-2022-28885.html", "published_at": "2022-04-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaec9cc77e", "title": "CVE-2022-28885 - F-Secure Policy Manager", "url": "https://baldur.dk/blog/CVE-2022-28885/", "published_at": "2022-04-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542bcecfde", "title": "CVE-2020-XXXX - BTCPay (XSS to leaked private key)", "url": "https://baldur.dk/CVE-2020-XXXX.html", "published_at": "2020-09-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaecc4d006", "title": "CVE-2020-XXXX - BTCPay (XSS to leaked private key)", "url": "https://baldur.dk/blog/CVE-2020-XXXX/", "published_at": "2020-09-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542c306e6e", "title": "CVE-2020-12480 - Play Framework (Global CSRF Bypass)", "url": "https://baldur.dk/CVE-2020-12480.html", "published_at": "2020-02-09T23:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaed5b0ab9", "title": "CVE-2020-12480 - Play Framework (Global CSRF Bypass)", "url": "https://baldur.dk/blog/CVE-2020-12480/", "published_at": "2020-02-09T23:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542c8c6754", "title": "CVE-2019-XXXXX/fsc-2019-3 - F-secure Internet Gatekeeper (RCE)", "url": "https://baldur.dk/CVE-2019-XXXXX%7Cfsc-2019-3.html", "published_at": "2019-10-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaed6d762a", "title": "CVE-2019-XXXXX/fsc-2019-3 - F-secure Internet Gatekeeper (RCE)", "url": "https://baldur.dk/blog/CVE-2019-XXXXX%7Cfsc-2019-3/", "published_at": "2019-10-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542d36e5a4", "title": "CVE-2019-XXXX - Cerberus FTP (XSS to RCE)", "url": "https://baldur.dk/CVE-2019-XXXX.html", "published_at": "2019-09-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542dfa7ba9", "title": "CVE-2019-XXXXX/fsc-2019-4 - F-secure Server Security (RCE)", "url": "https://baldur.dk/CVE-2019-XXXXX%7Cfsc-2019-4.html", "published_at": "2019-09-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaedf46696", "title": "CVE-2019-XXXX - Cerberus FTP (XSS to RCE)", "url": "https://baldur.dk/blog/CVE-2019-XXXX/", "published_at": "2019-09-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaee9b5f0c", "title": "CVE-2019-XXXXX/fsc-2019-4 - F-secure Server Security (RCE)", "url": "https://baldur.dk/blog/CVE-2019-XXXXX%7Cfsc-2019-4/", "published_at": "2019-09-09T22:00:00+00:00" }, { "id": "01a08735-b72a-700f-976d-30542e5ef1a1", "title": "CVE-2018-9191 - Fortinet FortiClient (LPE)", "url": "https://baldur.dk/CVE-2018-9191.html", "published_at": "2018-09-09T22:00:00+00:00" }, { "id": "01a0d55d-bf31-73ee-8723-1dfaef8ed84d", "title": "CVE-2018-9191 - Fortinet FortiClient (LPE)", "url": "https://baldur.dk/blog/CVE-2018-9191/", "published_at": "2018-09-09T22:00:00+00:00" } ] posts Claim your blog
Back to baldur.dk
Blog · corpus.blog/blogs/baldur.dk/posts

baldur.dk

baldur.dk

2026

2025

2024

2023

2022

2020

2019

2018