Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN
  • SIGN UP
  • thezdi
  • Trend Micro
thezdi
Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN SIGN UP

Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING
SUBSCRIBE

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks (Archive)
Blog post
,
Archive

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks (Archive)

  • September 03, 2024
  • Windows, LPE, Research, Exploit
CVE-2024-38213: Copy2Pwn Exploit Evades Windows Web Protections
Blog post

CVE-2024-38213: Copy2Pwn Exploit Evades Windows Web Protections

  • August 15, 2024
  • Microsoft, MoTW, Copy2Pwn, Research, Exploit
Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
Blog post

Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform

  • July 01, 2024
  • Logsign, Research, Exploit
CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki
Blog post

CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki

  • August 23, 2023
  • XWiki, Research, Exploit
Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight
Blog post

Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight

  • May 25, 2023
  • Sonos, Pwn2Own, Research, Exploit
CVE-2023-20869/20870: Exploiting VMware Workstation at Pwn2Own Vancouver
Blog post

CVE-2023-20869/20870: Exploiting VMware Workstation at Pwn2Own Vancouver

  • May 18, 2023
  • VMware, Pwn2Own, Exploit
TP-Link WAN-side Vulnerability CVE-2023-1389 Added to the Mirai Botnet Arsenal
Blog post

TP-Link WAN-side Vulnerability CVE-2023-1389 Added to the Mirai Botnet Arsenal

  • April 24, 2023
  • TPLink, Pwn2Own, Exploit, Threat Hunting
CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection
Blog post

CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection

  • October 19, 2022
  • Sophos, JSON, Exploit
Riding the InfoRail to Exploit Ivanti Avalanche
Blog post

Riding the InfoRail to Exploit Ivanti Avalanche

  • July 19, 2022
  • Ivanti, JNDI, Exploit
Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks
Blog post

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

  • March 17, 2022
  • Windows, LPE, Research, Exploit
keyboard_arrow_left   keyboard_arrow_right

General Inquiries

zdi@trendmicro.com

Find us on X

@thezdi

Find us on Mastodon

Mastodon

Media Inquiries

media_relations@trendmicro.com

Sensitive Email Communications

PGP Key
WHO WE ARE
  • Our Mission
  • Trend Micro
  • TippingPoint IPS
HOW IT WORKS
  • Process
  • Researcher Rewards
  • FAQS
  • Privacy
ADVISORIES
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
BLOG
thezdi