Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments

Blog post

Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments

November 02, 2023
Microsoft, Exchange, 0-day

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend

Blog post

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend

November 16, 2022
Exchange, Microsoft, 0-day

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref

Blog post

ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref

January 28, 2021
Microsoft, Research, 0-day

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

Blog post

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

January 19, 2021
Linux, Research, 0-day

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

Blog post

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

June 25, 2020
NETGEAR, Wireless, 0-day, Exploit

ZDI-CAN-6135: A Remote Code Execution Vulnerability in the Microsoft Windows Jet Database Engine

Blog post

ZDI-CAN-6135: A Remote Code Execution Vulnerability in the Microsoft Windows Jet Database Engine

September 20, 2018
0-day, Microsoft, Exploit

Remote Root in DirecTV's Wireless Video Bridge: A Tale of Rage and Despair

Blog post

Remote Root in DirecTV's Wireless Video Bridge: A Tale of Rage and Despair

December 13, 2017
Linksys, Vulnerability, 0-day

Duck-Assisted Code Execution in EMC Data Protection Advisor

Blog post

Duck-Assisted Code Execution in EMC Data Protection Advisor

September 26, 2017
0-day, Research, EMC

Busting Myths in Foxit Reader

Blog post

Busting Myths in Foxit Reader

August 17, 2017
0-day, Research, Foxit