The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING
Performing SQL Backflips to Achieve Code Execution on Schneider Electric’s EcoStruxure Operator Terminal Expert at Pwn2Own Miami 2020
Blog post

Performing SQL Backflips to Achieve Code Execution on Schneider Electric’s EcoStruxure Operator Terminal Expert at Pwn2Own Miami 2020

CVE-2020-7460: FreeBSD Kernel Privilege Escalation
Blog post

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

Chaining 5 Bugs for Code Execution on the Rockwell FactoryTalk View SE HMI at Pwn2Own Miami
Blog post

Chaining 5 Bugs for Code Execution on the Rockwell FactoryTalk View SE HMI at Pwn2Own Miami

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router
Blog post

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

A Trio of Bugs Used to Exploit Inductive Automation at Pwn2Own Miami
Blog post

A Trio of Bugs Used to Exploit Inductive Automation at Pwn2Own Miami

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification
Blog post

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification

Exploiting the TP-Link Archer A7 at Pwn2Own Tokyo
Blog post

Exploiting the TP-Link Archer A7 at Pwn2Own Tokyo

CVE-2019-1306: Are you my Index?
Blog post

CVE-2019-1306: Are you my Index?

Taking Control of VMware Through the Universal Host Control Interface: Part 2
Blog post

Taking Control of VMware Through the Universal Host Control Interface: Part 2

CVE-2019-0708: A Comprehensive Analysis of a Remote Desktop Services Vulnerability
Blog post

CVE-2019-0708: A Comprehensive Analysis of a Remote Desktop Services Vulnerability