The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING

Check it Out: Enforcement of Bounds Checks in Native JIT Code

Blog post

Check it Out: Enforcement of Bounds Checks in Native JIT Code

October 05, 2017
Research, JavaScript, Chakra

VMware Escapology – How to Houdini the Hypervisor

Blog post

VMware Escapology – How to Houdini the Hypervisor

October 04, 2017
VMware, Research, Metasploit

Duck-Assisted Code Execution in EMC Data Protection Advisor

Blog post

Duck-Assisted Code Execution in EMC Data Protection Advisor

September 26, 2017
0-day, Research, EMC

Simple to Find, Simple to Fix – Locating Weak File Permissions in Advantech WebAccess

Blog post

Simple to Find, Simple to Fix – Locating Weak File Permissions in Advantech WebAccess

September 13, 2017
Research, SCADA, Advantech

Busting Myths in Foxit Reader

Blog post

Busting Myths in Foxit Reader

August 17, 2017
0-day, Research, Foxit

The Blue Frost Security Challenge: An Exploitation Journey for Fun and Free Drinks

Blog post

The Blue Frost Security Challenge: An Exploitation Journey for Fun and Free Drinks

August 10, 2017
Exploit, Research

Pythonizing the VMware Backdoor

Blog post

Pythonizing the VMware Backdoor

August 03, 2017
VMWare, Research, Tools

Understanding Risk in the Unintended Giant: JavaScript

Blog post

Understanding Risk in the Unintended Giant: JavaScript

July 19, 2017
JavaScript, Research

Use-After-Silence: Exploiting a quietly patched UAF in VMware

Blog post

Use-After-Silence: Exploiting a quietly patched UAF in VMware

June 27, 2017
VMware, Research

Auditing Adobe Reader: The Open Source Attack Surface in Closed Source Software

Blog post

Auditing Adobe Reader: The Open Source Attack Surface in Closed Source Software

May 04, 2017
Adobe, Research, Vulnerability