1. Another Byte Bites the Dust - How XBOW Turned a Blind SSRF into a File Reading Oracle vulnerability | Critical | 2025-07-28 12:00 | xbow.com | original ↗ | #vulnerability-research | #ssrf | #exfiltration
2. Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution vulnerability | Critical | 2025-07-25 12:00 | CVE-2023-39631 | xbow.com | original ↗ | #rce | #vulnerability-research | #python