Learn about the remote code execution vulnerability in CodeIgniter4 and try out our Dev-Container based test environment to follow along! #cve #vulnerability #php mogwailabs.de/en/blog/2026...

Vulnerability Spotlight: CVE-2023-32692

Analysis of a Remote Code Execution vulnerability in the PHP Framework CodeIgniter

mogwailabs.de

Happy to announce another loyal sponsor for our upcoming Elbsides 2026 conference - @mogwailabs.bsky.social - a cyber security outfit focused on offensive security, delivering cutting edge penetration tests, security assessments and trainings. Thank you for being a Bronze Sponsor again.

In our latest blog post, we examine the reporting and disclosure obligations for software vendors under the European Cyber Resilience Act (CRA). Parts of these obligations take effect this September. mogwailabs.de/en/blog/2026...

Reporting and Disclosure Obligations in the Cyber Resilience Act

When do vendors need to report what to whom?

mogwailabs.de

We know we are late, but happy New Year everyone 🥳 . We have already been busy and are now a GCVE Numbering Authority (GNA). The Global CVE (GCVE) allocation system is a new, decentralized approach to vulnerability identification and numbering. More info about GCVE: gcve.eu

We're pleased to announce that we donated a total of € 7,100 from Bug Bounty rewards to charities this year. Hacky Christmas everybody!

New security advisory: Generex RCCMDTray Remote OS Command Execution. mogwailabs.de/en/advisorie...

Generex RCCMDTray Remote OS Command Execution

mogwailabs.de

We just added a new vulnerability to our "bug parade" page. If you are using 4D based applications, please ensure that you are on the latest patch level to avoid potential security risks. mogwailabs.de/en/advisorie...

4D Unauthenticated File Disclosure

mogwailabs.de

In our latest blog post, we dive into the hidden gems of the Java library c3p0 and explore how it can be leveraged in different exploitation scenarios. Happy reading! 😀 mogwailabs.de/en/blog/2025...

c3p0, you little rascal

The c3p0 library provides many useful exploitation primitives, deserving more attention

mogwailabs.de

Hello Bluesky 😀