Curated security research, vulnerabilities, advisories and tools for practitioners.

projectzero.google

Security coverage collected from projectzero.google. (Page 6)

151.

Adventures in Video Conferencing Part 3: The Even Wilder World of WhatsApp

blog | 2018-12-11 00:00 | projectzero.google | original ↗ | #whatsapp | #research | #video-conferencing

152.

Adventures in Video Conferencing Part 1: The Wild World of WebRTC

blog | 2018-12-04 00:00 | projectzero.google | original ↗ | #research | #webrtc | #video-conferencing

153.

Injecting Code into Windows Protected Processes using COM - Part 2

blog | 2018-11-30 00:00 | projectzero.google | original ↗ | #windows | #code-injection | #project-zero

154.

Heap Feng Shader: Exploiting SwiftShader in Chrome

blog | 2018-10-24 00:00 | projectzero.google | original ↗ | #chrome | #project-zero | #swiftshader

155.

blog | 2018-10-18 00:00 | projectzero.google | original ↗ | #ios | #kernel | #xnu

156.

Injecting Code into Windows Protected Processes using COM - Part 1

blog | 2018-10-16 00:00 | projectzero.google | original ↗ | #windows | #code-injection | #project-zero

157.

365 Days Later: Finding and Exploiting Safari Bugs using Publicly Available Tools

blog | 2018-10-04 00:00 | projectzero.google | original ↗ | #vulnerability-research | #browser | #project-zero

158.

[CVE-2018-17182] A cache invalidation bug in Linux memory management

vulnerability | 2018-09-26 00:00 | CVE-2018-17182 | projectzero.google | original ↗ | #linux | #cve | #memory-management

159.

OATmeal on the Universal Cereal Bus: Exploiting Android phones over USB

blog | 2018-09-10 00:00 | projectzero.google | original ↗ | #android | #exploit | #project-zero

160.

The Problems and Promise of WebAssembly

blog | 2018-08-16 00:00 | projectzero.google | original ↗ | #research | #security | #webassembly

161.

Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege

blog | 2018-08-14 00:00 | projectzero.google | original ↗ | #windows | #exploitation | #project-zero

162.

Adventures in vulnerability reporting

blog | 2018-08-02 00:00 | projectzero.google | original ↗ | #process | #vulnerability-reporting | #project-zero

163.

Drawing Outside the Box: Precision Issues in Graphic Libraries

blog | 2018-07-26 00:00 | projectzero.google | original ↗ | #vulnerability-research | #precision | #project-zero

164.

Detecting Kernel Memory Disclosure – Whitepaper

blog | 2018-06-21 00:00 | projectzero.google | original ↗ | #whitepaper | #project-zero | #bochspwn-reloaded

165.

Bypassing Mitigations by Attacking JIT Server in Microsoft Edge

blog | 2018-05-10 00:00 | projectzero.google | original ↗ | #project-zero | #mitigation-bypass | #edge

166.

Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege

blog | 2018-04-18 00:00 | projectzero.google | original ↗ | #vulnerability-research | #privilege-escalation | #arbitrary-file-write

167.

Reading privileged memory with a side-channel

blog | 2018-01-03 00:00 | projectzero.google | original ↗ | #meltdown | #spectre | #side-channel

168.

aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript

blog | 2017-12-18 00:00 | projectzero.google | original ↗ | #rce | #windows | #lateral-movement

169.

Over The Air - Vol. 2, Pt. 3: Exploiting The Wi-Fi Stack on Apple Devices

blog | 2017-10-11 00:00 | projectzero.google | original ↗ | #rce | #apple | #kernel-exploitation

170.

Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs

blog | 2017-10-05 00:00 | projectzero.google | original ↗ | #information-disclosure | #windows | #reverse-engineering

171.

Over The Air - Vol. 2, Pt. 2: Exploiting The Wi-Fi Stack on Apple Devices

blog | 2017-10-03 00:00 | projectzero.google | original ↗ | #exploitation | #firmware | #apple

172.

Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices

blog | 2017-09-28 00:00 | projectzero.google | original ↗ | #attack-surface | #ios | #apple

173.

[CVE-2016-9079] The Great DOM Fuzz-off of 2017

vulnerability | 2017-09-21 00:00 | CVE-2016-9079 | projectzero.google | original ↗ | #firefox | #fuzzing | #project-zero

174.

Bypassing VirtualBox Process Hardening on Windows

blog | 2017-08-23 00:00 | projectzero.google | original ↗ | #windows | #virtualbox | #project-zero

175.

Windows Exploitation Tricks: Arbitrary Directory Creation to Arbitrary File Read

blog | 2017-08-08 00:00 | projectzero.google | original ↗ | #privilege-escalation | #windows | #exploitation

176.

Trust Issues: Exploiting TrustZone TEEs

blog | 2017-07-24 00:00 | projectzero.google | original ↗ | #exploitation | #mobile-security | #arm

177.

Exploiting the Linux kernel via packet sockets

vulnerability | 2017-05-10 00:00 | CVE-2017-7308 | projectzero.google | original ↗ | #fuzzing | #linux | #privilege-escalation

178.

Exploiting .NET Managed DCOM

blog | 2017-04-28 00:00 | projectzero.google | original ↗ | #windows | #exploitation | #dotnet

179.

[CVE-2017-2370] Exception-oriented exploitation on iOS

vulnerability | 2017-04-18 00:00 | CVE-2017-2370 | projectzero.google | original ↗ | #exploitation | #ios | #kernel

180.

Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)

blog | 2017-04-11 00:00 | projectzero.google | original ↗ | #rce | #exploitation | #firmware

← Previous More →