The November 2024 Security Update Review

November 12, 2024 | Dustin Childs CONTINUE READING

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

Blog post

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

September 16, 2020
Apache, Research

Performing SQL Backflips to Achieve Code Execution on Schneider Electric’s EcoStruxure Operator Terminal Expert at Pwn2Own Miami 2020

Blog post

Performing SQL Backflips to Achieve Code Execution on Schneider Electric’s EcoStruxure Operator Terminal Expert at Pwn2Own Miami 2020

September 10, 2020
Pwn2Own, ICS, Schneider Electric

The September 2020 Security Update Review

Blog post

The September 2020 Security Update Review

September 08, 2020
Microsoft, Adobe, Security Patch

CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

Blog post

CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

September 03, 2020
Adobe, Reader, Exploit

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

Blog post

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

September 01, 2020
FreeBSD, LPE, Research

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows

Blog post

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows

August 27, 2020
CWE, Research

CVE-2020-10611: Achieving Code Execution on the Triangle MicroWorks SCADA Data Gateway

Blog post

CVE-2020-10611: Achieving Code Execution on the Triangle MicroWorks SCADA Data Gateway

August 25, 2020
ICS, Triangle MicroWorks, Pwn2Own, SCADA

15 Years of the Zero Day Initiative

Blog post

15 Years of the Zero Day Initiative

August 20, 2020
Program News, Retrospective

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor

Blog post

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor

August 11, 2020
Windows, Security Patch, Research

The August 2020 Security Update Review

Blog post

The August 2020 Security Update Review

August 11, 2020
Adobe, Microsoft, Security Patch