Pwn2Own Berlin 2025: Day One Results
Pwn2Own柏林2025首日迎来11次尝试,包括AI首次参赛。DEVCORE团队的Pumpkin利用整数溢出漏洞成功提权Red Hat Linux,获2万美元及2积分。Summoning团队的Sina Kheirkhah因已知但未修复的NVIDIA Triton漏洞获1.5万美元及1.5积分。 2025-5-15 10:10:50 Author: www.thezdi.com(查看原文) 阅读量:14 收藏

Welcome to the first day of Pwn2Own Berlin 2025! We have 11 different attempts, including our first ever AI attempts. We’ll be updating this blog with results as we have them.

SUCCESS - Pumpkin (@u1f383) from DEVCORE Research Team used an integer overflow to escalate privs on Red Hat Linux. He earns $20,000 and 2 Master of Pwn points.

Going from user land to root.

COLLISION - We have a bug collision. Although Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) successfully demonstrated his exploit of #NVIDIA Triton, the bug he used was known by the vendor (but not patched). He still earns $15K and 1.5 Master of Pwn points.


文章来源: https://www.thezdi.com/blog/2025/5/15/pwn2own-berlin-2025-day-one-results
如有侵权请联系:admin#unsafe.sh