[ BLOG ]

PUBLISHED WORK

Security research, CVEs we found, and interesting vulnerabilities.

5 posts·2 researchers

LATEST5 Oct 2026

16 More Adobe CVEs and e0x1337 Solo Adobe Commerce Privilege Escalation

After 31 CVEs in July, bau1u found 15 more in Adobe Content Credentials SDK across three bulletins. Then e0x1337 dropped a solo Adobe Commerce CVE, a privilege escalation rated CVSS 8.2. 47 Adobe CVEs total now.

@bau1u

4 min read

CVEAdobeVulnerability Research+4

ALL POSTS

3 Aug 2026

SSRF Redirect Bypass in Sonatype Nexus, Stealing Cloud Credentials Through a Proxy Repository (CVE-2026-14646)

Sonatype Nexus Repository Manager had SSRF protection that blocked requests to cloud metadata endpoints. But it only validated the initial URL. A single HTTP redirect bypassed everything. Full technical breakdown of CVE-2026-14646.

Cart Swap Attack on Stripe for WooCommerce, From Session Hijack to Full Payment Bypass

A deep dive into how a missing ownership check on a single WooCommerce AJAX endpoint let attackers rewrite Stripe payment amounts mid checkout. Includes the full attack flow, root cause analysis, and what every developer should learn from it.

31 CVEs in Adobe Content Credentials SDK & Adobe Commerce

We spent months digging into Adobe's Content Credentials SDK and Adobe Commerce. Ended up with 31 CVEs across four security bulletins.

Welcome to TFSec

Who we are, what we do, and what you can expect from this blog.

Announcement

@bau1u

1m→