New Blog Post - Digging Through Six Old Sandbox Escapes in ColdFusion (ca. 2001 through 2012)

www.hoyahaxa.com/2025/12/digg...

I'll be speaking at @districtcon.bsky.social in January 2026. Come find out about some new language-level vulnerabilities in Adobe ColdFusion. Looks like a great selection of talks!

New Blog Post: Sandbox Security Escapes in ColdFusion and Lucee (CVE-2025-30288 and CVE-2024-55354)

www.hoyahaxa.com/2025/06/sand...

The slides from my CFCamp 2025 (@cfcamp) talk are now online -- Understanding CFML Vulnerabilities, Exploits, and Attack Paths

www.hoyahaxa.com/2025/06/cfca...

New Blog Post: An SSRF to LFI Payload for PDF Generators (CVE-2024-34112 and beyond)

www.hoyahaxa.com/2025/01/an-s...

New Blog Post: An Initial Analysis of Adobe ColdFusion CVE-2024-53961 - www.hoyahaxa.com/2024/12/an-i...

hello world.