Webinar

Christmas in July - Critical vulnerabilities unwrapped

June 11, 2025

Speaker

Shubham Shah

Chief Security Research Officer at Searchlight Cyber

Button

Share on social

Join the newsletter

Overview

Nobody wants a zero-day disclosure just before Christmas! That's why throughout July, Searchlight Cyber will be publishing a series of vulnerabilities - from pre-authentication command execution vulnerabilities to flaws affecting widely deployed enterprise web properties. Join us to learn how these bugs were identified, responsibly disclosed, and can be remediated.

Vulnerability #1: Persistent XSS on Adobe Experience Manager
Vulnerability #2: Pre-authentication vulnerabilities in DotNetNuke
Vulnerability #3: RCE in survey software Lighthouse Studio
Vulnerability #4: RCE Vulnerability in ETQ Reliance
Vulnerability #5: Pre-auth vuln on Adobe Experience Manager

Throughout July, we'll reveal how we uncovered several high-impact vulnerabilities in widely used enterprise software. Shubham (Shubs), Searchlight's SVP of Engineering & Research and prolific bug bounty hunter, will unpack these findings and demonstrate the methodologies and techniques used to identify these critical flaws.

Speaker

Shubham Shah

Chief Security Research Officer at Searchlight Cyber

Connect

Shubham Shah is Chief Security Research Officer, having joined Searchlight Cyber following the acquisition of Assetnote, where he was Co-Founder and CTO. Shubham leads the global security research team whose findings feed directly into Searchlight Exposure – surfacing zero-day vulnerabilities in the tools organisations rely on, often months ahead of public disclosure. He remains a prolific bug bounty hunter ranked in the top 50 hackers on HackerOne, and has presented at various industry events including QCon London, Kiwicon, AusCert, BSides Canberra, and CrikeyCon.

Related Webinars

Webinar

Christmas in July - Critical vulnerabilities unwrapped

Cyberattacks and retaining customer loyalty - the hidden cost no one is talking about

How dark web intelligence powers preemptive threat exposure management

The Ransomware Report H2 2025: Why the drop in victims isn’t a win

Test Your Attack Surface: Security Tools to Validate Exposures

Ransomware: Preparing for the inevitable with Dr. Mike Saylor

How to measure the ROI of your Attack Surface Program (ASM)

The Ransomware Report H1 2025: Trends, Groups & Insights

Beyond ASM: What CTEM means for your external risk strategy

Surfacing Security (series one) - Attack Surface Management (ASM) and beyond

Legacy vs modern Attack Surface Management: What is true ASM?

Discover the benefits of Searchlight Cyber's Partner Program

Where is cybercrime coming from in 2025?

The Ransomware Report 2025: Dark Web Trends, Groups & Insights

The 12 Days of Dark Web FAQ: A mini webinar series

How to identify criminals talking about your business on the dark web

Correlating cybersecurity risk and dark web exposure with Marsh McLennan

Criminality on the dark web in 2024: Drugs, Fraud, and Trafficking

The Changing Landscape of Dark Web Forums and Marketplaces

How LEA, government, and enterprises gather evidence from the dark web

Gaining Visibility of the Entire Ransomware Kill Chain

How to Elevate Cyber Threat Intelligence in Your Organization

Initial Access Brokers and Infostealers: Your Business for Sale on the Dark Web

Spotting Insider Threats on the Dark Web