Pwn2Own Miami 2022: Inductive Automation Ignition Remote Code Execution July... 2022-7-22 08:0:0 | 阅读: 7 | 收藏 | Sector 7 - sector7.computest.nl ignition sso inductive username

Pwn2Own Miami 2022: OPC UA .NET Standard Trusted Application Check Bypass July... 2022-7-19 08:0:0 | 阅读: 4 | 收藏 | Sector 7 - sector7.computest.nl opc x509v3 issuers attacker bypass

CoronaCheck App TLS certificate vulnerabilities Febru... 2022-2-3 08:0:0 | 阅读: 2 | 收藏 | Sector 7 - sector7.computest.nl x509 bio exitout

Sandbox escape + privilege escalation in StorePrivilegedTaskService Decem... 2021-12-21 08:0:0 | 阅读: 5 | 收藏 | Sector 7 - sector7.computest.nl xpc library mrt sandboxed

Proctorio Chrome extension Universal Cross-Site Scripting Decem... 2021-12-14 08:0:0 | 阅读: 4 | 收藏 | Sector 7 - sector7.computest.nl proctorio software chrome webcam

Zoom RCE from Pwn2Own 2021 Augus... 2021-8-23 08:0:0 | 阅读: 4 | 收藏 | Sector 7 - sector7.computest.nl client allocations overflow ivar2 logmessage

iOS VPN support: 3 different bugs Octob... 2020-10-7 08:0:0 | 阅读: 2 | 收藏 | Sector 7 - sector7.computest.nl oakley ntohs dhgrp lorv grp

Sign in with Apple - authentication bypass July... 2020-7-1 08:0:0 | 阅读: 1 | 收藏 | Sector 7 - sector7.computest.nl touchid attacker client subdomain

Jenkins - authentication bypass Janua... 2020-1-30 08:0:0 | 阅读: 2 | 收藏 | Sector 7 - sector7.computest.nl client jenkins keystream remoting attacker

DNS rebinding for HTTPS Novem... 2019-11-25 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl ems attacker handshake resumption client

Spring Security - insufficient cryptographic randomness July... 2019-7-4 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl setseed security pivotal

XenServer - path traversal leading to authentication bypass Augus... 2018-8-14 08:0:0 | 阅读: 2 | 收藏 | Sector 7 - sector7.computest.nl xapi xen rbac xenserver

Volkswagen Auto Group MIB infotainment system - unauthenticated remote code execution as root July... 2018-7-19 08:0:0 | 阅读: 11 | 收藏 | Sector 7 - sector7.computest.nl cars security ivi rcc volkswagen

NAPALM - command execution on NAPLM controller from host July... 2017-7-12 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl napalm iosxr complies python

MySQL Connector/J - Unexpected deserialisation of Java objects April... 2017-4-25 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl database connector attacker remote deserialize

Ansible - command execution on Ansible controller from host Janua... 2017-1-9 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl facts interpreter jinja security

Observium - unauthenticated remote code execution Novem... 2016-11-10 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl observium php decoded pkts topn

cSRP/srpforjava - obtaining of hashed passwords Augus... 2016-8-18 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl srp client verifier hellman diffie

StartEncrypt - obtaining valid SSL certificates for unauthorized domains June... 2016-6-30 08:0:0 | 阅读: 0 | 收藏 | Sector 7 - sector7.computest.nl startcom security client attacker