Yaniv Nizry

Yaniv is a white-hat hacker and a Cyber Security Researcher in Checkmarx's SCA group with 7+ years of experience in the field. Yaniv began his path as a software engineer, and during his military service at 8200 in the IDF, he got to experience cyber security - both on the offensive and defensive sides of the map. Yaniv researched tens of 0-day vulnerabilities in open source packages, with some impacting millions of package downloads per month. He's eager to experience, experiment, and learn.

12 days ago
NPM Replicator Remote Code Execution Deserialization

NPM, the package manager for Node.js, is an open source project that serves as a critical part of the JavaScript community and helps support one of the largest developer ecosystems. According to...

Read Now
6 months ago
CVE-2021-44832 – Apache Log4j 2.17.0 Arbitrary Code Execution via JDBCAppender DataSource Element

Log4j is a highly popular logging package in Java that is used widely by developers, companies such as Google, Steam, Apple, Minecraft, and even on one of NASA’s Mars rovers utilize this package....

Read Now
almost 2 years ago
Mutation Cross-Site Scripting (mXSS) Vulnerabilities Discovered in Mozilla-Bleach

As part of the beta testing phase that took place earlier this year for our recently launched Software Composition Analysis solution, CxSCA, the Checkmarx Security Research Team investigated...

Read Now