Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN
  • SIGN UP
  • thezdi
  • Trend Micro
thezdi
Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN SIGN UP

Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING
SUBSCRIBE

Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS
Blog post

Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS

  • April 06, 2023
  • Parallels, Research, Bash
CVE-2022-38108: RCE in SolarWinds Network Performance Monitor
Blog post

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

  • February 28, 2023
  • SolarWinds, Research, Detection Guidance
Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation
Blog post

Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

  • January 23, 2023
  • Microsoft, Research, CSRSS
CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion
Blog post

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion

  • January 19, 2023
  • Adobe, ColdFusion, Research
CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management

  • November 23, 2022
  • ManageEngine, Research
Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading
Blog post

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

  • October 31, 2022
  • Apache, Batik, Research
Riding the InfoRail to Exploit Ivanti Avalanche – Part 2
Blog post

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2

  • September 08, 2022
  • Ivanti, Deserialization, Research
CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution
Blog post

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution

  • September 06, 2022
  • Microsoft, NFS, Research
Looking at Patch Gap Vulnerabilities in the VMware ESXi TCP/IP Stack
Blog post

Looking at Patch Gap Vulnerabilities in the VMware ESXi TCP/IP Stack

  • July 27, 2022
  • VMware, Research, Reverse Engineering
Riding the InfoRail to Exploit Ivanti Avalanche
Blog post

Riding the InfoRail to Exploit Ivanti Avalanche

  • July 19, 2022
  • Ivanti, JNDI, Exploit
keyboard_arrow_left   keyboard_arrow_right

General Inquiries

zdi@trendmicro.com

Find us on X

@thezdi

Find us on Mastodon

Mastodon

Media Inquiries

media_relations@trendmicro.com

Sensitive Email Communications

PGP Key
WHO WE ARE
  • Our Mission
  • Trend Micro
  • TippingPoint IPS
HOW IT WORKS
  • Process
  • Researcher Rewards
  • FAQS
  • Privacy
ADVISORIES
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
BLOG
thezdi