(CVE-2021-1758) macOS/iOS CoreText Out-Of-Bounds Read CVE: CVE-2021-1758Tested Versions:macOS Catalina 10.15.4 (19E287)Product URL(s):https://apple... 2021-2-10 08:0:0 | 阅读: 0 | 收藏 | Advisories on STAR Labs - starlabs.sg rfork typelist rol2 harness

(CVE-2021-1790) macOS/iOS CoreText libhvf Out-Of-Bounds Read CVE: CVE-2021-1790Tested Versions:macOS Catalina 10.15.4 (19E287)Product URL(s):https://apple... 2021-2-10 08:0:0 | 阅读: 0 | 收藏 | Advisories on STAR Labs - starlabs.sg lldb unnamed hvf

Chrome 1-Day Hunting - Uncovering and Exploiting CVE-2020-15999 This blog post details the exploitation process for the vulnerability CVE 2020-15999 in Google Chro... 2021-1-9 08:0:0 | 阅读: 16 | 收藏 | Blogs on STAR Labs - starlabs.sg overflow memory chrome websql renderer

Instrumenting Adobe Reader with Frida Frida is an open-source dynamic instrumentation toolkit that has become popular in recent years, and... 2020-11-13 08:0:0 | 阅读: 0 | 收藏 | Blogs on STAR Labs - starlabs.sg escript stalker python esargparse readu32

Analysis & Exploitation of a Recent TP-Link Archer A7 Vulnerability This post provides detailed analysis and an exploit achieving remote code execution for CVE-2020-108... 2020-10-16 08:0:0 | 阅读: 1 | 收藏 | Blogs on STAR Labs - starlabs.sg payload slave recvbuffer tdp tdpdserver

Pwn2Own 2020: Oracle VirtualBox Escape In this post, we will cover the vulnerabilities used at Pwn2Own 2020 for the Oracle VirtualBox escap... 2020-9-25 08:0:0 | 阅读: 0 | 收藏 | Blogs on STAR Labs - starlabs.sg pextra pthis urb pvusb virtualbox

This Font is not Your Type Half a year ago, I found a vulnerability in libFontParser.dylib, whichis a part of CoreGraphics lib... 2020-9-4 08:0:0 | 阅读: 1 | 收藏 | Blogs on STAR Labs - starlabs.sg blend cff2 charstring opentype cff

(CVE-2020-24430) Adobe Acrobat Pro DC FDF.addContact Use-After-Free Vulnerability CVE: CVE-2020-24430Tested Versions:Adobe Reader DC 2020.012.20041Product URL(s):https://adobe... 2020-8-21 08:0:0 | 阅读: 0 | 收藏 | Advisories on STAR Labs - starlabs.sg wchar v35 28605ac0 gcorehft cdecl

ASUSWRT URL Processing Stack Buffer Overflow While processing the URL for any blacklisted XSS list like the script tag in the check_xss_blacklist... 2020-8-7 08:0:0 | 阅读: 4 | 收藏 | Blogs on STAR Labs - starlabs.sg r7 repeats asus vpath a6250

(CVE-2020-13937) Apache Kylin - Unauthenticated Configuration Disclosure CVE: CVE-2020-13937Tested Versions:All versions starting from 2.0.0 up to 2.3.2, all versions sta... 2020-7-17 08:0:0 | 阅读: 3 | 收藏 | Advisories on STAR Labs - starlabs.sg kylin security getconfig scr

Oracle VirtualBox VHWA Use-After-Free Privilege Escalation Vulnerability As part of my month-long internship at STAR Labs, I was introduced to VirtualBox and learnt much abo... 2020-6-26 08:0:0 | 阅读: 3 | 收藏 | Blogs on STAR Labs - starlabs.sg surf vboxvhwacmd pcmd vram

(CVE-2020-0634) Windows CLFS UAF Memory Corruption Vulnerability CVE: CVE-2020-0634Tested Versions:Windows RS2( 2019.01.08) build 7763ntoskrnl.exe file version 1... 2020-6-12 08:0:0 | 阅读: 3 | 收藏 | Advisories on STAR Labs - starlabs.sg ffffd000 fffff800 ffffe000 clfs 000000e9

(CVE-2020-1664) Juniper Junos OS dcd create_debug_data() buffer overflow CVE: CVE-2020-1664Tested Versions:Junos OS 20.1R1.11Product URL(s):https://www.juniper.net/... 2020-6-12 08:0:0 | 阅读: 4 | 收藏 | Advisories on STAR Labs - starlabs.sg dcd attacker v13 maintenance overflow

(CVE-2021-0218) Junos OS lc_fetch_license_keys() command injection CVE: CVE-2021-0218Tested Versions:Junos OS 20.1R1.11Product URL(s):https://www.juniper.net/... 2020-6-12 08:0:0 | 阅读: 5 | 收藏 | Advisories on STAR Labs - starlabs.sg autoupdate 0x400u attacker mgd ddl

TianFu Cup 2019: Adobe Reader Exploitation Last year, I participated in the TianFu Cup competition in Chengdu, China. The chosen target was the... 2020-4-10 08:0:0 | 阅读: 4 | 收藏 | Blogs on STAR Labs - starlabs.sg ffffff81 reclaim vftable myread dv

Adventures in Hypervisor: Oracle VirtualBox Research I have been into the vulnerability research field for a while now, and VirtualBox is my very first t... 2020-4-3 08:0:0 | 阅读: 1 | 收藏 | Blogs on STAR Labs - starlabs.sg virtualbox vram memory 0x8000000 pdevins