Zero Day Initiative — Blog

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Detailing Two VMware Workstation TOCTOU Vulnerabilities

October 22, 2020
VMware, Exploit, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

October 07, 2020
Apache, Research, Struts

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

The Anatomy of a Bug Door: Dissecting Two D-Link Router Authentication Bypasses

October 01, 2020
D-Link, Router, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Exploiting Other Remote Protocols in IBM WebSphere

September 29, 2020
IBM, WebSphere, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

September 16, 2020
Apache, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

September 01, 2020
FreeBSD, LPE, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows

August 27, 2020
CWE, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor

August 11, 2020
Windows, Security Patch, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Abusing Java Remote Protocols in IBM WebSphere

July 21, 2020
IBM, WebSphere, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

July 09, 2020
Microsoft, Windows, Research