Velstadt Blog

Cybersecurity Insights

Research, threat trends, and practical guidance from our cybersecurity team.

Minimal dark-blue illustration of remote code execution, showing a remote attacker using a laptop to interact with a distant server infrastructure through data streams.
July 10, 2026 • 13 min read

From Exposed elFinder to Remote Code Execution: How an Unauthenticated File Manager Led to Server Compromise

Attack Surface Offensive Security Red Teaming
Security misconfiguration leading to path traversal and unauthorized local file access in exposed services
July 1, 2026 • 11 min read

Exposed WSO2 SOAP Services and Path Traversal: How a File Management Endpoint Led to Unauthenticated Local File Read

Attack Surface Offensive Security Red Teaming
Cover image for Velstadt's article on a critical MS SQL injection finding that escalated to remote code execution in a production CRM
May 20, 2026 • 21 min read

Anatomy of a Critical Pentest Finding: From MS SQL Injection to Remote Code Execution in a Production CRM

Attack Surface Cyber Risk Malware & Ransomware Offensive Security