More Scope Injection for Fun and Profit (or, why those security updates broke your functions) - www.hoyahaxa.com/2026/01/more...
2 months ago
0
0
0
0
Posts by Brian
3 months ago
0
0
0
0
RCE via ColdFusion ARchive (CAR) Deployment: One Example of an Authenticated Attack Path in CFAdmin (CVE-2025-61808)
www.hoyahaxa.com/2026/01/rce-...
3 months ago
0
0
0
0
New Blog Post - Digging Through Six Old Sandbox Escapes in ColdFusion (ca. 2001 through 2012)
www.hoyahaxa.com/2025/12/digg...
4 months ago
0
0
0
0
I'll be speaking at @districtcon.bsky.social in January 2026. Come find out about some new language-level vulnerabilities in Adobe ColdFusion. Looks like a great selection of talks!
5 months ago
1
0
0
0
New Blog Post: Sandbox Security Escapes in ColdFusion and Lucee (CVE-2025-30288 and CVE-2024-55354)
www.hoyahaxa.com/2025/06/sand...
9 months ago
0
0
0
0
The slides from my CFCamp 2025 (@cfcamp) talk are now online -- Understanding CFML Vulnerabilities, Exploits, and Attack Paths
www.hoyahaxa.com/2025/06/cfca...
9 months ago
0
0
0
0
Advertisement
New Blog Post: An SSRF to LFI Payload for PDF Generators (CVE-2024-34112 and beyond)
www.hoyahaxa.com/2025/01/an-s...
1 year ago
0
0
0
0
New Blog Post: An Initial Analysis of Adobe ColdFusion CVE-2024-53961 - www.hoyahaxa.com/2024/12/an-i...
1 year ago
1
0
0
0
hello world.
1 year ago
0
0
0
0