Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

CVE-2022-21661: Exposing Database Info via WordPress SQL Injection

Blog post

CVE-2022-21661: Exposing Database Info via WordPress SQL Injection

January 18, 2022
WordPress, Research, Exploit

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

Blog post

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

October 21, 2021
Adobe, Research, Exploit

CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug

Blog post

CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug

September 22, 2021
Atlassian, Research, Exploit

ProxyToken: An Authentication Bypass in Microsoft Exchange Server

Blog post

ProxyToken: An Authentication Bypass in Microsoft Exchange Server

August 30, 2021
Microsoft, Exchange, Exploit

CVE-2020-3992 & CVE-2021-21974: Pre-Auth Remote Code Execution in VMware ESXi

Blog post

CVE-2020-3992 & CVE-2021-21974: Pre-Auth Remote Code Execution in VMware ESXi

March 02, 2021
VMware, ESXi, Exploit

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

Blog post

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

January 21, 2021
SolarWinds, Exploit, Research

CVE-2020-7468: Turning Imprisonment to Advantage in the FreeBSD ftpd chroot Jail

Blog post

CVE-2020-7468: Turning Imprisonment to Advantage in the FreeBSD ftpd chroot Jail

December 21, 2020
FreeBSD, Exploit

Detailing Two VMware Workstation TOCTOU Vulnerabilities

Blog post

Detailing Two VMware Workstation TOCTOU Vulnerabilities

October 22, 2020
VMware, Exploit, Research

CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

Blog post

CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

September 03, 2020
Adobe, Reader, Exploit

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

Blog post

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

June 25, 2020
NETGEAR, Wireless, 0-day, Exploit