Rishi
Security Researcher
Explained projects
The Non-Invasive Skeleton Key: Inside rxerium/FreePBX-Vulns-December-25
How a handful of YAML templates outpaced global botnets to secure critical telecom infrastructure without firing a single exploit.
The Art of the Passive Check: Inside rxerium-templates
How a boutique collection of Nuclei scripts uses metadata forensics and Base64 decoding to hunt zero-day vulnerabilities without firing a single exploit.
Yet to be explained
CVE-2025-68613
Explain
Detection for CVE-2025-68613
CVE-2025-8110
Explain
Detection template for CVE-2025-8110
CVE-2025-52691
Explain
Detection for CVE-2025-52691
CVE-2025-68461
Explain
Detection for CVE-2025-68461
cms-exploitation-campaign
Explain
Large Scale Exploitation Campaign against CMS devices reported in July 2026
CVE-2025-37164
Explain
Detection for CVE-2025-37164
CVE-2025-40602
Explain
Detection for CVE-2025-40602
CVE-2025-53072-CVE-2025-62481
Explain
Detection for CVE-2025-53072 + CVE-2025-62481
n8n-vulnerability-detection
Explain
Vulnerability detection scripts for the n8n product.
ai-bot-ip-ranges
Explain
Official IP ranges for AI bot crawlers (OpenAI, Anthropic, Google, Microsoft, Perplexity). Weekly auto-updates.
fortra-goanywhere-mft-vulnerability-detection
Explain
Vulnerability detection scripts for the Goanywhere MFT product.
CVE-2025-58360
Explain
Passive detection for CVE-2025-58360
CVE-2025-34299
Explain
Detection for CVE-2025-34299