The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING
One man's patch is another man's treasure: A tale of a failed HPE patch
Blog post

One man's patch is another man's treasure: A tale of a failed HPE patch

Automating VMware RPC Request Sniffing
Blog post

Automating VMware RPC Request Sniffing

A Matching Pair of Use-After-Free Bugs in Chakra asm.js
Blog post

A Matching Pair of Use-After-Free Bugs in Chakra asm.js

VMware’s Launch escape SYSTEM
Blog post

VMware’s Launch escape SYSTEM

Invariantly Exploitable Input: An Apple Safari Bug Worth Revisiting
Blog post

Invariantly Exploitable Input: An Apple Safari Bug Worth Revisiting

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch
Blog post

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch

Reading Backwards – Controlling an Integer Underflow in Adobe Reader
Blog post

Reading Backwards – Controlling an Integer Underflow in Adobe Reader

Exploiting Untrusted Objects through Deserialization: Analyzing 1 of 100+ HPE Bug Submissions
Blog post

Exploiting Untrusted Objects through Deserialization: Analyzing 1 of 100+ HPE Bug Submissions

On the Trail to Mobile Pwn2Own
Blog post

On the Trail to Mobile Pwn2Own

Wrapping the Converter within Foxit Reader
Blog post

Wrapping the Converter within Foxit Reader