Curated security research, vulnerabilities, advisories and tools for practitioners.

#exploit

Security coverage tagged exploit. (Page 3)

61.

CVE-2023-27997 Is Exploitable, and 69% of FortiGate Firewalls Are Vulnerable

vulnerability | 2023-06-30 00:00 | CVE-2023-27997 | bishopfox.com | Original ↗ | .md | #rce | #exploit | #shodan

62.

Breaking Javascript with Python Pickles (Solving brinebid in DEFCON CTF Qualifiers 2023)

blog | 2023-06-03 00:00 | blog.washi.dev | Original ↗ | .md | #ctf | #exploit | #javascript

63.

PaperCut CVE-2023-27350 Deep Dive and Indicators of Compromise

vulnerability | 2023-04-24 11:15 | CVE-2023-27350 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #exploit

64.

mast1c0re: Part 3 – Escaping the emulator

research | 2023-02-17 14:52 | mccaulay.co.uk | Original ↗ | .md | #vulnerability-research | #sandbox-escape | #exploitation

65.

Readline crime: exploiting a SUID logic bug

blog | 2023-02-16 13:00 | blog.trailofbits.com | Original ↗ | .md | #linux | #privilege-escalation | #exploit

66.

mast1c0re: Part 2 – Arbitrary PS2 code execution

research | 2023-02-10 14:33 | mccaulay.co.uk | Original ↗ | .md | #vulnerability-research | #exploitation | #exploit

67.

mast1c0re: Introduction – Exploiting the PS4 and PS5 through a game save

research | 2023-02-08 13:31 | mccaulay.co.uk | Original ↗ | .md | #vulnerability-research | #exploit | #emulator

68.

[CVE-2022-31704] VMware vRealize Log Insight VMSA-2023-0001 Technical Deep Dive

vulnerability | 2023-01-31 11:53 | CVE-2022-31704 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #vmware

69.

Dopamine: rootless semi-untethered jailbreak for iOS 15 to 26.0.1

tool | 2023-01-31 21:28 | github.com | Original ↗ | .md | #open-source | #mobile-security | #ios

70.

Exploiting null-dereferences in the Linux kernel

blog | 2023-01-19 00:00 | projectzero.google | Original ↗ | .md | #memory-safety | #linux | #exploit

71.

Exploiting CVE-2022-42703 - Bringing back the stack attack

vulnerability | 2022-12-08 00:00 | CVE-2022-42703 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

72.

blog | 2022-11-22 00:00 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

73.

[CVE-2022-34169] Gregor Samsa: Exploiting Java's XML Signature Verification

vulnerability | 2022-11-02 00:00 | CVE-2022-34169 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

74.

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain

blog | 2022-11-04 00:00 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

75.

RC4 Is Still Considered Harmful

blog | 2022-10-27 00:00 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

76.

Linux Kernel Exploit (CVE-2022–32250) with mqueue

vulnerability | 2022-08-23 15:00 | CVE-2022-32250 | theori.io | Original ↗ | .md | #use-after-free | #linux-kernel | #exploit

77.

Mass Exploitation of (Un)authenticated Zimbra RCE: CVE-2022-27925

vulnerability | 2022-08-10 15:22 | CVE-2022-27924 | volexity.com | Original ↗ | .md | #rce | #vulnerability-research | #threat-intelligence

78.

The quantum state of Linux kernel garbage collection CVE-2021-0920 (Part I)

research | 2022-08-10 00:00 | CVE-2021-0920 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

79.

2022 0-day In-the-Wild Exploitation…so far

vulnerability | 2022-06-30 00:00 | projectzero.google | Original ↗ | .md | #zero-day | #exploit | #vulnerability

80.

The curious tale of a fake Carrier.app

blog | 2022-06-23 00:00 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

81.

Binary-searching into CVMServer

vulnerability | 2022-06-16 15:00 | theori.io | Original ↗ | .md | #macos | #exploit | #cve-2022-26721

82.

DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach

vulnerability | 2022-06-15 11:48 | CVE-2022-1040 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

83.

An Autopsy on a Zombie In-the-Wild 0-day

vulnerability | 2022-06-14 00:00 | projectzero.google | Original ↗ | .md | #zero-day | #exploit | #vulnerability

84.

Zero-Day Exploitation of Atlassian Confluence

vulnerability | 2022-06-02 16:05 | CVE-2022-26134 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

85.

Exploiting Safari’s ANGLE Component

vulnerability | 2022-05-17 15:00 | CVE-2022-26717 | theori.io | Original ↗ | .md | #exploit | #cve-2022-26717 | #safari

86.

[CVE-2022-1388] F5 iControl REST Endpoint Authentication Bypass Technical Deep Dive

vulnerability | 2022-05-09 20:43 | CVE-2022-1388 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #exploit | #cve-2022-1388

87.

Release of Technical Report into the AMD Security Processor

blog | 2022-05-10 00:00 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

88.

The More You Know, The More You Know You Don’t Know

blog | 2022-04-19 00:00 | projectzero.google | Original ↗ | .md | #zero-day | #exploit | #vulnerability

89.

CVE-2021-1782, an iOS in-the-wild vulnerability in vouchers

vulnerability | 2022-04-14 00:00 | CVE-2021-1782 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

90.

CVE-2021-30737, @xerub's 2021 iOS ASN.1 Vulnerability

vulnerability | 2022-04-07 00:00 | CVE-2021-30737 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #security-research

← Previous More →