The 2019 Pwnie Award For Best Server-Side Bug
Pulse Secure SSL VPN
Pulse Secure is apparently leading SSL VPN vendor. Itss SSL VPN was used by Twitter, Uber, Microsoft, sla, SpaceX, probably that weird flamethrower company Elon Musk started, Akamai, Intel, IBM, VMware, the US Navy, the Department of Homeland Security, and, like, half of all Fortune 500 companies.
Orange Tsai and Meh Chang broke other SSL VPNs, and those breaks were nominated too, and so for the purposes of voting, we think you should just take this as “Orange Tsai and Meh Chang broke most of the SSL VPNs”