Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

Detailing Two VMware Workstation TOCTOU Vulnerabilities

Blog post

Detailing Two VMware Workstation TOCTOU Vulnerabilities

October 22, 2020
VMware, Exploit, Research

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

Blog post

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

October 07, 2020
Apache, Research, Struts

The Anatomy of a Bug Door: Dissecting Two D-Link Router Authentication Bypasses

Blog post

The Anatomy of a Bug Door: Dissecting Two D-Link Router Authentication Bypasses

October 01, 2020
D-Link, Router, Research

Exploiting Other Remote Protocols in IBM WebSphere

Blog post

Exploiting Other Remote Protocols in IBM WebSphere

September 29, 2020
IBM, WebSphere, Research

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

Blog post

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

September 16, 2020
Apache, Research

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

Blog post

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

September 01, 2020
FreeBSD, LPE, Research

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows

Blog post

Introducing CWE-1265: A New Way to Understand Vulnerable Reentrant Control Flows

August 27, 2020
CWE, Research

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor

Blog post

Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor

August 11, 2020
Windows, Security Patch, Research

Abusing Java Remote Protocols in IBM WebSphere

Blog post

Abusing Java Remote Protocols in IBM WebSphere

July 21, 2020
IBM, WebSphere, Research

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

Blog post

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

July 09, 2020
Microsoft, Windows, Research