Research Team
Focusing on proactive security research, we aim to help organizations stay ahead of emerging threats and vulnerabilities.
IceWarp's X-File-Operation RCE (CVE-2025-14500) is really a missing null-byte check in the FastCGI parameter builder. One null byte in a request is enough for unauthenticated code execution as root.
We have seen broad membership rules in multiple penetration tests and red team engagements; let's take a look at one case we encountered recently and how to (ab)use it should you come across it
Reverse engineering ionCube's Zend VM hooks and the opcode dispatch it drives.