Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers

Blog post

The Battle Between White Box and Black Box Bug Hunting in Wireless Routers

March 11, 2021
NETGEAR, Reverse Engineering, Research

The March 2021 Security Update Review

Blog post

The March 2021 Security Update Review

March 09, 2021
Adobe, Microsoft, Security Patch

CVE-2020-3992 & CVE-2021-21974: Pre-Auth Remote Code Execution in VMware ESXi

Blog post

CVE-2020-3992 & CVE-2021-21974: Pre-Auth Remote Code Execution in VMware ESXi

March 02, 2021
VMware, ESXi, Exploit

CVE-2020-8625: A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server

Blog post

CVE-2020-8625: A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server

February 25, 2021
ISC BIND, DNS, Research

ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag

Blog post

ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag

February 18, 2021
Adobe, Info Leak, Research

Three More Bugs in Orion’s Belt

Blog post

Three More Bugs in Orion’s Belt

February 11, 2021
SolarWinds, Research

The February 2021 Security Update Review

Blog post

The February 2021 Security Update Review

February 09, 2021
Adobe, Microsoft, Security Patch

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref

Blog post

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref

January 28, 2021
Microsoft, Research, 0-day

Announcing Pwn2Own Vancouver 2021

Blog post

Announcing Pwn2Own Vancouver 2021

January 26, 2021
Pwn2Own, Tesla, Zoom, Microsoft, Adobe, Google, Apple

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

Blog post

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

January 21, 2021
SolarWinds, Exploit, Research