We set out to reproduce a known TVox exploit chain and ended up discovering a new 0-day. Here's how a failed PoC, an old ISO, Opus 5, and Claude Code led us to an unauthenticated RCE hiding in plain sight.

WordPress plugin "Profile Builder Pro" (versions before 3.14.5) is susceptible to Unauthenticated PHP Object Injection. In this blog post, we discuss how we discovered and exploited the vulnerability using a novel POP chain, how AI helped in the process, taking a final look at targets in the wild.

Multiple vulnerabilities in vtenext 25.02 and prior versions allow unauthenticated attackers to bypass authentication through three separate vectors, ultimately leading to remote code execution on the underlying server.