STRLCPY

A Comprehensive Analysis of the 3CX Attack

Vulkan files leak, a rare look into Russian cyberwarfare tactics

CVE-2023-21768 _ Pwning Windows Ancillary Function Driver for WinSock (afd.sys)

CVE-2022-47522 _ MacStealer: Wi-Fi Client Isolation Bypass

ARM TrustZone: pivoting to the secure world

CVE-2023-27326 _ Parallels Toolgate VM Escape

BlackLotus UEFI bootkit: Myth confirmed

CVE-2022-25664 _ The code that wasn't there: Reading memory on an Android device by accident

A Race to Report a TOCTOU: Analysis of a Bug Collision in Intel SMM

Userland exploit chain to dump the memory of any Windows PPL process

CVE-2023-1017/18 _ Vulns in TPM 2.0 reference implementation code

Defining the Cobalt Strike Reflective Loader

CVE-2023-25136 _ OpenSSH Pre-Auth Double Free

CVE-2023-23397 _ Microsoft Outlook EoP

Multiple Internet to Baseband RCE Vulns in Exynos Modems

CVE-2022-44268/7 _ ImageMagick: The hidden vulnerability behind your online images

CVE-2023-21608 _ Adobe Acrobat Reader resetForm RCE

VMSA-2023-0001 _ VMware vRealize Log Insight Multiple Vulns

CVE-2022-34689 _ Exploiting a Critical Spoofing Vuln in Windows CryptoAPI

how to completely own an airline in 3 easy steps

CVE-2023-23504 _ XNU Heap Underwrite in dlil.c

CVE-2022-38181 _ yet another Arm Mali GPU Android exploit

CVE-2022-42864 _ Diabolical Cookies on iOS/MacOS

CVE-2023-24068/69 _ Abusing Signal Desktop for fun & Espionage

CVE-2023-0179 _ Linux kernel stack buffer overflow in nftables

making malware with VX-API

Prototype Pollution in Python

Unlocking LockBit, a Ransomware story

Xdr33, A Variant Of CIA’s HIVE Attack Kit

The OWASSRF + TabShell exploit chain

Game Of Active Directory, PWNING is coming!

Blindside: EDR Evasion with Hardware Breakpoints

Precious Gemstones: The New Generation of Kerberos Attacks

Netcomm Unauthenticated RCE Vuln

CVE-2022-46169 _ Cacti Unauthenticated Command Injection

Exciting approaches to memory safety

CVE-2022-41082/80 _ OWASSRF, Bypassing ProxyNotShell Mitigations

MeshyJSON, A TP-Link tdpServer JSON Stack Overflow

VLAN Hopping techniques

Spice up your persistence loading PHP extensions from memory

Firebase is Insecure by Default

SilentMoonwalk: Implementing a dynamic Call Stack Spoofer

CVE-2022-28672 _ Foxit PDF Reader UAF RCE

CVE-2022-4543 _ EntryBleed: Breaking KASLR under KPTI with Prefetch

Huawei Secure Monitor Vulnerabilities

FOISted, remote exploit for MikroTik’s RouterOS 6

IIS modules: The evolution of web shells

Atlassian Session Hijacking (& 2FA bypass) using stolen JWTs

CVE-2022-42703 _ Bringing back the stack attack to Linux (kernel)

Fuzzing ping(8)… and finding a 24 year old bug.