Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN
  • SIGN UP
  • thezdi
  • Trend Micro
thezdi
Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN SIGN UP

Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING
SUBSCRIBE

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability
Blog post

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability

  • July 14, 2022
  • NFS, Microsoft, Research
CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack
Blog post

CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack

  • June 16, 2022
  • FreeBSD, Kernel, Research
Is exploiting a null pointer deref for LPE just a pipe dream?
Blog post

Is exploiting a null pointer deref for LPE just a pipe dream?

  • June 02, 2022
  • Bitdefender, Research, LPE
CVE-2022-26381: Gone by others! Triggering a UAF in Firefox
Blog post

CVE-2022-26381: Gone by others! Triggering a UAF in Firefox

  • April 07, 2022
  • Firefox, Mozilla, Research
Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks
Blog post

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

  • March 17, 2022
  • Windows, LPE, Research, Exploit
CVE-2021-44142: Details on a Samba Code Execution Bug Demonstrated at Pwn2Own Austin
Blog post

CVE-2021-44142: Details on a Samba Code Execution Bug Demonstrated at Pwn2Own Austin

  • February 01, 2022
  • Samba, Pwn2Own, Netatalk, Research
CVE-2021-44790: Code Execution on Apache via an Integer Underflow
Blog post

CVE-2021-44790: Code Execution on Apache via an Integer Underflow

  • January 25, 2022
  • Apache, Research
CVE-2022-21661: Exposing Database Info via WordPress SQL Injection
Blog post

CVE-2022-21661: Exposing Database Info via WordPress SQL Injection

  • January 18, 2022
  • WordPress, Research, Exploit
CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor
Blog post

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

  • December 18, 2021
  • Log4j, Apache, Research
CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader
Blog post

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

  • October 21, 2021
  • Adobe, Research, Exploit
keyboard_arrow_left   keyboard_arrow_right

General Inquiries

zdi@trendmicro.com

Find us on X

@thezdi

Find us on Mastodon

Mastodon

Media Inquiries

media_relations@trendmicro.com

Sensitive Email Communications

PGP Key
WHO WE ARE
  • Our Mission
  • Trend Micro
  • TippingPoint IPS
HOW IT WORKS
  • Process
  • Researcher Rewards
  • FAQS
  • Privacy
ADVISORIES
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
BLOG
thezdi