The Great Escape: A Case Study of VM Escape and EoP Vulnerabilities Chaining VM escape and elevation-of-privilege vulnerabilities into a full com... 2021-11-26 00:0:0 | 阅读: 10 | 收藏 | Publications on STAR Labs - starlabs.sg elevation competition hitcon slides

Diving into Open-source LMS Codebases IntroductionLooking to practice on source code review, I had been diving into how open-source LMS c... 2021-11-16 08:0:0 | 阅读: 26 | 收藏 | Blogs on STAR Labs - starlabs.sg php chamilo htaccess payload moodle

Analysis of CVE-2021-1758 (CoreText Out-Of-Bounds Read) References:STARLabs Advisory STAR-21-1758In February, Peter found a OOB read vulnerability in li... 2021-9-14 08:0:0 | 阅读: 32 | 收藏 | Blogs on STAR Labs - starlabs.sg p16 tinyinst p32 library

(CVE-2021-30844) macOS smbfs Out-of-Bounds Read CVE: CVE-2021-30844Tested Versions:macOS BigSur 11.0 - 11.2.3Product URL(s):https://apple.com... 2021-9-13 08:0:0 | 阅读: 23 | 收藏 | Advisories on STAR Labs - starlabs.sg t2p smbfs t2 t2rq kern

(CVE-2021-30845) macOS smbfs Out-of-Bounds Read CVE: CVE-2021-30845Tested Versions:macOS BigSur 11.0 - 11.2.3Product URL(s):https://apple.com... 2021-9-13 08:0:0 | 阅读: 21 | 收藏 | Advisories on STAR Labs - starlabs.sg smbfs unavailable development sm smp

Identifying Bugs in Router Firmware at Scale with Taint Analysis In the past few months, Akash (@enigmatrix) and I (@daniellimws) worked on developing a taint analys... 2021-8-4 08:0:0 | 阅读: 23 | 收藏 | Blogs on STAR Labs - starlabs.sg rcl cmsobj dal mdmoid ntp

Simple Vulnerability Regression Monitoring with V8Harvest During my research into Javascript Engine (V8), I have created a small tool to help you view recent... 2021-6-25 08:0:0 | 阅读: 34 | 收藏 | Blogs on STAR Labs - starlabs.sg regress chrome v8harvest python3

(CVE-2021-30868) macOS smbfs Race Condition leading to Use-After-Free Vulnerability CVE: CVE-2021-30868Tested Versions:macOS BigSur 11.0 - 11.2.3Product URL(s):https://apple.com... 2021-6-18 08:0:0 | 阅读: 33 | 收藏 | Advisories on STAR Labs - starlabs.sg iod negotiate smbfs sessionp smbiod

(CVE-20221-35403) Prolink PRC2402M touchlist_sync.cgi main Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35403Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 28 | 收藏 | Advisories on STAR Labs - starlabs.sg getacl prolink touchlist querystring meshmode

(CVE-20221-35404) Prolink PRC2402M applogin.cgi sys_login1 Authenticated Command Injection Vulnerability CVE: CVE-2021-35404Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 39 | 收藏 | Advisories on STAR Labs - starlabs.sg ipaddr prolink querystring applogin login1

(CVE-20221-35406) Prolink PRC2402M login.cgi sys_login1 Authenticated Command Injection Vulnerability CVE: CVE-2021-35406Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 31 | 收藏 | Advisories on STAR Labs - starlabs.sg ipaddr prolink login1 payload strdup

(CVE-20221-35400) Prolink PRC2402M mesh.cgi get_extender_page Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35400Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 27 | 收藏 | Advisories on STAR Labs - starlabs.sg prolink extender querystring ipaddr localip

(CVE-20221-35401) Prolink PRC2402M login.cgi sys_login Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35401Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 27 | 收藏 | Advisories on STAR Labs - starlabs.sg prolink langchange salted strcmp popen

(CVE-20221-35406) Prolink PRC2402M qos.cgi qos_settings Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35406Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 18 | 收藏 | Advisories on STAR Labs - starlabs.sg qos sel bandwidth prolink strdup

(CVE-20221-35407) Prolink PRC2402M mesh.cgi get_upgrade_page Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35407Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 23 | 收藏 | Advisories on STAR Labs - starlabs.sg prolink querystring localip ipaddr ivar2

(CVE-20221-35409) Prolink PRC2402M nightled.cgi SetNightLed Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35409Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-10 08:0:0 | 阅读: 30 | 收藏 | Advisories on STAR Labs - starlabs.sg prolink nightled strdup querystring setnightled

(CVE-20221-35402) Prolink PRC2402M live_api.cgi satellist_list Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35402Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-9 08:0:0 | 阅读: 27 | 收藏 | Advisories on STAR Labs - starlabs.sg prolink satellite querystring bypass attacker

(CVE-2021-30836) WebKit WebCore::AudioNode::disconnect null pointer reference CVE: CVE-2021-30836Tested Versions:webkitGTK2.32.0Product URL(s):https://webkit.org/In ord... 2021-6-9 08:0:0 | 阅读: 26 | 收藏 | Advisories on STAR Labs - starlabs.sg webcore webkit audionode asan webkitgtk

(CVE-2021-35408) Prolink PRC2402M qos.cgi qos_sta_settings Un-authenticated Command Injection Vulnerability CVE: CVE-2021-35408Tested Versions:Prolink PRC2402M 20190909Product URL(s):https://prolink2u.... 2021-6-8 08:0:0 | 阅读: 24 | 收藏 | Advisories on STAR Labs - starlabs.sg qos sta prolink prc2402m payload

(CVE-2021-0956) Android NFC Out-Of-Bounds Write due to increase mNumTechList without bounds checking CVE: CVE-2021-0956Tested Versions:RQ1A.210205.004Product URL(s):https://www.android.com/Th... 2021-5-28 08:0:0 | 阅读: 24 | 收藏 | Advisories on STAR Labs - starlabs.sg nfctag dlog