Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation Starting in July of 2022, the Windows CSRSS process en... 2023-1-24 00:25:0 | 阅读: 23 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com activation csrss windows microsoft privileged

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Lucas Miller a... 2023-1-20 01:45:46 | 阅读: 49 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com giop coldfusion odbc opcodes

Announcing Pwn2Own Vancouver for 2023 Jump to the contest rulesLast year, we celebrated the... 2023-1-12 22:43:33 | 阅读: 27 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com tesla pwn2own contest tier microsoft

The January 2023 Security Update Review Welcome to the first patch Tuesday of the new year. As expected, Adobe and Microsoft have released... 2023-1-11 02:37:42 | 阅读: 39 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft attacker windows exchange cves

Looking Back at the Bugs of 2022 We’ve successfully orbited our star once more and are... 2023-1-6 00:54:51 | 阅读: 29 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com zdi pwn2own microsoft exchange

Behind the Scenes of Pwn2Own Toronto 2022 Last week, we completed our largest Pwn2Own contest ever... 2022-12-16 01:10:14 | 阅读: 24 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com pwn2own contest contestants highlights zdi

The December 2022 Security Update Review Welcome to the final Patch Tuesday of 2021, and the first since Pwn2Own Toronto. As always, Adobe... 2022-12-14 02:31:39 | 阅读: 27 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft windows cves security network

Pwn2Own Toronto 2022 - Day Four Results and Master of Pwn Welcome back to the final day of Pwn2Own Toronto for 2... 2022-12-10 00:32:34 | 阅读: 28 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com printer canon earn lexmark collision

Pwn2Own Toronto 2022 - Day Three Results Welcome back to Pwn2Own Toronto! Yesterday, we awarded... 2022-12-9 00:5:27 | 阅读: 28 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com earn speaker overflow smashup samsung

Pwn2Own Toronto 2022 - Day Two Results Welcome back to Pwn2Own Toronto! Yesterday, we awarded... 2022-12-7 23:49:34 | 阅读: 43 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com earn pwn2own collision speaker netgear

Pwn2Own Toronto 2022 - Day One Results Welcome to the first day of Pwn2Own Toronto for 2022.... 2022-12-6 23:21:47 | 阅读: 31 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com earn rounds ax1800 qrious competition

Pwn2Own Toronto 2022 - The Schedule Welcome to Pwn2Own Toronto 2022! his year marks the 10th anniversary of our consumer-focused versi... 2022-12-6 08:45:40 | 阅读: 34 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com printer netgear canon rax30 mf743cdw

Pwn2Own Returns to Miami Beach for 2023 ¡Bienvenidos de nuevo a Miami!Even as we make our final preparations for our consumer-focused cont... 2022-12-1 22:32:46 | 阅读: 22 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com opc pwn2own miami contest contestant

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management In this excerpt of a Trend Micro Vulnerability Research... 2022-11-23 23:58:41 | 阅读: 56 | 收藏 | www.thezdi.com partial database malicious

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend By now you have likely already heard about the in-the-... 2022-11-17 00:55:50 | 阅读: 42 | 收藏 | www.thezdi.com exchange powershell remoting xamlreader microsoft

The November 2022 Security Update Review Welcome to the penultimate Patch Tuesday of 2021. As expected, Adobe and Microsoft have released t... 2022-11-9 02:28:55 | 阅读: 28 | 收藏 | www.thezdi.com microsoft exchange windows attacker security

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading IntroductionI stumbled upon the Apache Batik library w... 2022-11-1 00:14:51 | 阅读: 37 | 收藏 | www.thezdi.com batik remote security loaded

CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection In this excerpt of a Trend Micro Vulnerability Research... 2022-10-19 22:0:0 | 阅读: 88 | 收藏 | www.thezdi.com sophos perl remote network

The October 2022 Security Update Review Another Patch Tuesday is here, and Adobe and Microsoft have released their latest crop of new secu... 2022-10-12 01:26:35 | 阅读: 47 | 收藏 | www.thezdi.com microsoft attacker windows security cves

MindShaRE: Analyzing BSD Kernels for Uninitialized Memory Disclosures using Binary Ninja Disclosure of uninitialized memory is one of the common... 2022-9-22 00:39:45 | 阅读: 28 | 收藏 | www.thezdi.com memory analysis mlil ssa copyout