Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE | Karma(In)Security
karmainsecurity.com
This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.