Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

Announcing Pwn2Own Tokyo 2020 – Live from Toronto!

Blog post

Announcing Pwn2Own Tokyo 2020 – Live from Toronto!

July 28, 2020
Pwn2Own, Apple, Google, Android, Facebook

Chaining 5 Bugs for Code Execution on the Rockwell FactoryTalk View SE HMI at Pwn2Own Miami

Blog post

Chaining 5 Bugs for Code Execution on the Rockwell FactoryTalk View SE HMI at Pwn2Own Miami

July 23, 2020
Rockwell, HMI, SCADA, Pwn2Own

Abusing Java Remote Protocols in IBM WebSphere

Blog post

Abusing Java Remote Protocols in IBM WebSphere

July 21, 2020
IBM, WebSphere, Research

The July 2020 Security Update Review

Blog post

The July 2020 Security Update Review

July 14, 2020
Adobe, Microsoft, Security Patch

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

Blog post

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

July 09, 2020
Microsoft, Windows, Research

CVE-2020-7454: Killing Two Birds with One Bug in libalias

Blog post

CVE-2020-7454: Killing Two Birds with One Bug in libalias

June 30, 2020
Oracle, FreeBSD, Research

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

Blog post

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

June 25, 2020
NETGEAR, Wireless, 0-day, Exploit

Our CVE Story: Bringing our ZDI community to the CVE community

Blog post

Our CVE Story: Bringing our ZDI community to the CVE community

June 22, 2020
Program News, MITRE, CNA

CVE-2020-1181: SharePoint Remote Code Execution Through Web Parts

Blog post

CVE-2020-1181: SharePoint Remote Code Execution Through Web Parts

June 17, 2020
Microsoft, SharePoint, Research

A Trio of Bugs Used to Exploit Inductive Automation at Pwn2Own Miami

Blog post

A Trio of Bugs Used to Exploit Inductive Automation at Pwn2Own Miami

June 11, 2020
Pwn2Own, SCADA, Inductive Automation