The Curious Engineer

All blogs / Security

Zero Day Initiative

thezdi.com/blog

SecurityReverse engineering

’17’18’19’20’21’22’23’24’25’26
Posts
543 from 1 Oct 2017 to 27 Oct 2026
Posting
weekly (39 in the last year)
Kind
company blog
Feed
https://www.thezdi.com/blog?format=rss
Also at
https://zerodayinitiative.com/blog

2026 37

  1. CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
  2. The October 2026 Security Update Review
  3. Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn
  4. Pwn2Own Ireland 2026 - Day Two Results
  5. Pwn2Own Ireland 2026 - Day One Results
  6. Pwn2Own Ireland 2026 - The Full Schedule
  7. CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer
  8. The Apple Security Update Review for September 2026
  9. The September 2026 Security Update Review
  10. The August 2026 Security Update Review
  11. The July 2026 Apple Security Update Review
  12. Pwn2Own Ireland 2026 – New Targets and Categories
  13. The July 2026 Security Update Review
  14. CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys
  15. The June 2026 Apple Security Update Review
  16. The June 2026 Security Update Review
  17. Pwn2Own Berlin 2026: Day Three Results and Master of Pw
  18. Pwn2Own Berlin 2026 - Day Two Results
  19. Pwn2Own Berlin 2026 - Day One Results
  20. Pwn2Own Berlin 2026: The Full Schedule
  21. The May 2026 Security Update Review
  22. Zero Day Initiative — The Apple macOS Security Update Review
  23. Zero Day Initiative — CVE-2026-33824: Remote Code Execution in Windows IKEv2
  24. Zero Day Initiative — The April 2026 Security Update Review
  25. Zero Day Initiative — Node.js Trust Falls: Dangerous Module Resolution on Windows
  26. Zero Day Initiative — Announcing Pwn2Own Berlin for 2026
  27. Zero Day Initiative — The March 2026 Security Update Review
  28. Zero Day Initiative — CVE-2026-20841: Arbitrary Code Execution in the Windows Notepad
  29. Zero Day Initiative — The February 2026 Security Update Review
  30. Zero Day Initiative — CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall
  31. Zero Day Initiative — Pwn2Own Automotive 2026 - Day Three Results and the Master of Pwn
  32. Zero Day Initiative — Pwn2Own Automotive 2026 - Day Two Results
  33. Zero Day Initiative — Pwn2Own Automotive 2026 - Day One Results
  34. Zero Day Initiative — Pwn2Own Automotive 2026 - The Full Schedule
  35. Zero Day Initiative — The January 2026 Security Update Review
  36. Zero Day Initiative — Breaking Down the Attack Surface of the Kenwood DNR1007XR – Part Two
  37. Zero Day Initiative — Breaking Down the Attack Surface of the Kenwood DNR1007XR – Part One

2025 43

  1. Zero Day Initiative — The December 2025 Security Update Review
  2. Zero Day Initiative — The November 2025 Security Update Review
  3. Zero Day Initiative — Pwn2Own Ireland 2025: Day Three and Master of Pwn
  4. Zero Day Initiative — Pwn2Own Ireland 2025 - Day Two Results
  5. Zero Day Initiative — Pwn2Own Ireland 2025: Day One Results
  6. Zero Day Initiative — Pwn2Own Ireland 2025: The Full Schedule
  7. Zero Day Initiative — Pwn2Own Automotive Returns to Tokyo with Expanded Chargers and More!
  8. Zero Day Initiative — The October 2025 Security Update Review
  9. Zero Day Initiative — Crafting a Full Exploit RCE from a Crash in Autodesk Revit RFA File Parsing
  10. Zero Day Initiative — CVE-2025-23298: Getting Remote Code Execution in NVIDIA Merlin
  11. Zero Day Initiative — The September 2025 Security Update Review
  12. Zero Day Initiative — The August 2025 Security Update Review
  13. Zero Day Initiative — Pwn2Own Returns to Ireland with a One Million Dollar WhatsApp Target
  14. Zero Day Initiative — CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
  15. Zero Day Initiative — CVE-2025-4919: Corruption via Math Space in Mozilla Firefox
  16. Zero Day Initiative — The July 2025 Security Update Review
  17. Zero Day Initiative — Extracting Embedded MultiMediaCard (eMMC) contents in-system
  18. Zero Day Initiative — The June 2025 Security Update Review
  19. Zero Day Initiative — Pwn2Own Berlin 2025: Day Three Results
  20. Zero Day Initiative — Pwn2Own Berlin 2025: Day Two Results
  21. Zero Day Initiative — Pwn2Own Berlin 2025: Day One Results
  22. Zero Day Initiative — Pwn2Own Berlin: The Full Schedule
  23. Zero Day Initiative — The May 2025 Security Update Review
  24. Zero Day Initiative — CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
  25. Zero Day Initiative — The April 2025 Security Update Review
  26. Zero Day Initiative — MindshaRE: Using Binary Ninja API to Detect Potential Use-After-Free Vulnerabilities
  27. Zero Day Initiative — Building an electric vehicle simulator to research EVSEs
  28. Zero Day Initiative — The March 2025 Security Update Review
  29. Zero Day Initiative — CVE-2024-43639: Remote Code Execution in Microsoft Windows KDC Proxy
  30. Zero Day Initiative — Announcing Pwn2Own Berlin and Introducing an AI Category
  31. Zero Day Initiative — The February 2025 Security Update Review
  32. Zero Day Initiative — Looking Back at the Trend ZDI Activities from 2024
  33. Zero Day Initiative — Pwn2Own Automotive 2025 - Day Three and Final Results
  34. Zero Day Initiative — Pwn2Own Automotive 2025 - Day Two Results
  35. Zero Day Initiative — Pwn2Own Automotive 2025 - Day One Results
  36. Zero Day Initiative — Pwn2Own Automotive 2025: The Full Schedule
  37. Zero Day Initiative — Looking at the Attack Surfaces of the Pioneer DMH-WT7600NEX IVI
  38. Zero Day Initiative — Reviewing the Attack Surface of the Autel MaxiCharger: Part Two
  39. Zero Day Initiative — Reviewing the Attack Surface of the Autel MaxiCharger: Part One
  40. Zero Day Initiative — The January 2025 Security Update Review
  41. Zero Day Initiative — Looking at the Attack Surfaces of the Sony XAV-AX8500 Part 2
  42. Zero Day Initiative — Looking at the Attack Surfaces of the Sony XAV-AX8500
  43. Zero Day Initiative — ZDI Threat Hunting 2024: Highlights, Trends, & Challenges

2024 57

  1. Zero Day Initiative — Detailing the Attack Surfaces of the Tesla Wall Connector EV Charger
  2. Zero Day Initiative — SolarWinds Access Rights Manager: One Vulnerability to LPE Them All
  3. Zero Day Initiative — The December 2024 Security Update Review
  4. Zero Day Initiative — Detailing the Attack Surfaces of the WolfBox E40 EV Charger
  5. Zero Day Initiative — Looking at the Attack Surfaces of the Kenwood DMX958XR IVI
  6. Zero Day Initiative — Looking at the Internals of the Kenwood DMX958XR IVI
  7. Zero Day Initiative — The November 2024 Security Update Review
  8. Zero Day Initiative — Multiple Vulnerabilities in the Mazda In-Vehicle Infotainment (IVI) System
  9. Zero Day Initiative — Pwn2Own Ireland 2024: Day Four and Master of Pwn
  10. Zero Day Initiative — Pwn2Own Ireland 2024: Day Three Results
  11. Zero Day Initiative — Pwn2Own Ireland 2024: Day Two Results
  12. Zero Day Initiative — Pwn2Own Ireland Day One - The Results
  13. Zero Day Initiative — Pwn2Own Ireland - The Full Schedule
  14. Zero Day Initiative — The October 2024 Security Update Review
  15. Zero Day Initiative — From Pwn2Own Automotive: More Autel Maxicharger Vulnerabilities
  16. Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor
  17. Zero Day Initiative — Announcing Pwn2Own Automotive 2025
  18. Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE
  19. Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection
  20. Zero Day Initiative — The September 2024 Security Update Review
  21. Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty
  22. Zero Day Initiative — Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks (Archive)
  23. Zero Day Initiative — CVE-2024-37079: VMware vCenter Server Integer Underflow Code Execution Vulnerability
  24. Zero Day Initiative — From Pwn2Own Automotive: Taking Over the Autel Maxicharger
  25. Zero Day Initiative — CVE-2024-38213: Copy2Pwn Exploit Evades Windows Web Protections
  26. Zero Day Initiative — The August 2024 Security Update Review
  27. Zero Day Initiative — Introducing the Vanguard Awards
  28. Zero Day Initiative — Breaking Barriers and Assumptions: Techniques for Privilege Escalation on Windows: Part 3
  29. Zero Day Initiative — Breaking Barriers and Assumptions: Techniques for Privilege Escalation on Windows: Part 2
  30. Zero Day Initiative — Breaking Barriers and Assumptions: Techniques for Privilege Escalation on Windows: Part 1
  31. Zero Day Initiative — Multiple Vulnerabilities in the Deep Sea Electronics DSE855
  32. Zero Day Initiative — Announcing Pwn2Own Ireland – Bringing Pwn2Own (and WhatsApp) to the Emerald Isle
  33. Zero Day Initiative — Uncoordinated Vulnerability Disclosure: The Continuing Issues with CVD
  34. Zero Day Initiative — The July 2024 Security Update Review
  35. Zero Day Initiative — Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
  36. Zero Day Initiative — The June 2024 Security Update Review
  37. Zero Day Initiative — CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud
  38. Zero Day Initiative — MindShaRE: Decapping Chips for Electromagnetic Fault Injection (EMFI)
  39. Zero Day Initiative — The May 2024 Security Update Review
  40. Zero Day Initiative — CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own
  41. Zero Day Initiative — CVE-2024-2887: A Pwn2Own Winning Bug in Google Chrome
  42. Zero Day Initiative — CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability
  43. Zero Day Initiative — The April 2024 Security Updates Review
  44. Zero Day Initiative — Pwn2Own Vancouver 2024 - Day Two Results
  45. Zero Day Initiative — Pwn2Own Vancouver 2024 - Day One Results
  46. Zero Day Initiative — Pwn2Own Vancouver 2024 - The Full Schedule
  47. Zero Day Initiative — The March 2024 Security Update Review
  48. Zero Day Initiative — CVE-2023-36049: Microsoft .NET CRLF Injection Arbitrary File Write/Deletion Vulnerability
  49. Zero Day Initiative — The February 2024 Security Update Review
  50. Zero Day Initiative — CVE-2023-46263: Ivanti Avalanche Arbitrary File Upload Vulnerability
  51. Zero Day Initiative — Pwn2Own Automotive 2024 - Day Three Results
  52. Zero Day Initiative — Pwn2Own Automotive 2024 - Day Two Results
  53. Zero Day Initiative — Pwn2Own Automotive 2024 - Day One Results
  54. Zero Day Initiative — Pwn2Own Automotive 2024 - The Full Schedule
  55. Zero Day Initiative — Pwn2Own Vancouver 2024: Bringing Cloud-Native/Container Security to Pwn2Own
  56. Zero Day Initiative — The January 2024 Security Update Review
  57. Zero Day Initiative — Looking Back at the ZDI Activities from 2023

2023 34

  1. Zero Day Initiative — The December 2023 Security Update Review
  2. Zero Day Initiative — Attack Surface of the Ubiquiti Connect EV Station
  3. Zero Day Initiative — A Detailed Look at Pwn2Own Automotive EV Charger Hardware
  4. Zero Day Initiative — The November 2023 Security Update Review
  5. Zero Day Initiative — How To: Modifying EV Chargers for Benchtop Experiments
  6. Zero Day Initiative — Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments
  7. Zero Day Initiative — Pwn2Own Toronto 2023 - Day Four Results
  8. Zero Day Initiative — Pwn2Own Toronto 2023 - Day Three Results
  9. Zero Day Initiative — Pwn2Own Toronto 2023 - Day Two Results
  10. Zero Day Initiative — Pwn2Own Toronto 2023 - Day One Results
  11. Zero Day Initiative — Pwn2Own Toronto 2023 - The Full Schedule
  12. Zero Day Initiative — CVE-2023-38600: Story of an innocent Apple Safari copyWithin gone (way) outside
  13. Zero Day Initiative — The October 2023 Security Update Review
  14. Zero Day Initiative — Looking at the Attack Surface of the Sony XAV-AX5500 Head Unit
  15. Zero Day Initiative — Finding Deserialization Bugs in the SolarWinds Platform
  16. Zero Day Initiative — The September 2023 Security Update Review
  17. Zero Day Initiative — Looking at the ChargePoint Home Flex Threat Landscape
  18. Zero Day Initiative — Revealing the Targets and Rules for the First Pwn2Own Automotive
  19. Zero Day Initiative — CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki
  20. Zero Day Initiative — The August 2023 Security Update Review
  21. Zero Day Initiative — Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers
  22. Zero Day Initiative — CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability
  23. Zero Day Initiative — The SOHO Smashup Returns for Pwn2Own Toronto 2023
  24. Zero Day Initiative — The July 2023 Security Update Review
  25. Zero Day Initiative — CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs
  26. Zero Day Initiative — CVE-2022-31696: An Analysis of a VMware ESXi TCP Socket Keepalive Type Confusion LPE
  27. Zero Day Initiative — The June 2023 Security Update Review
  28. Zero Day Initiative — Adventures in Disclosure: When Reporting Bugs Goes Wrong
  29. Zero Day Initiative — CVE-2023-24941: Microsoft Network File System Remote Code Execution
  30. Zero Day Initiative — Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight
  31. Zero Day Initiative — CVE-2023-20869/20870: Exploiting VMware Workstation at Pwn2Own Vancouver
  32. Zero Day Initiative — The May 2023 Security Update Review
  33. Zero Day Initiative — CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service
  34. Zero Day Initiative — TP-Link WAN-side Vulnerability CVE-2023-1389 Added to the Mirai Botnet Arsenal

2022 14

  1. Behind the scenes of pwn2own toronto 2022
  2. The december 2022 security update review
  3. Pwn2own toronto 2022 master of pwn crowned
  4. Pwn2own toronto 2022 day three results
  5. Pwn2own toronto 2022 day two results
  6. Pwn2own toronto 2022 day one results
  7. Pwn2own toronto 2022 the schedule
  8. Pwn2own returns to miami beach for 2023
  9. Cve 2022 40300 sql injection in manageengine privileged access management
  10. Control your types or get pwned remote code execution in exchange powershell backend
  11. The november 2022 security update review
  12. Vulnerabilities in apache batik default security controls ssrf and rce through remote class loading
  13. Cve 2022 3236 sophos firewall user portal and web admin code injection
  14. The october 2022 security update review

2021 13

  1. Cve 2021 45105 denial of service via uncontrolled recursion in log4j strsubstitutor
  2. Exploitation of cve 2021 21220 from incorrect jit behavior to rce
  3. The december 2021 security update review
  4. Understanding the root cause of cve 2021 21220 a chrome bug from pwn2own 2021
  5. Two birds with one stone an introduction to v8 and jit exploitation
  6. Mindshare using io ninja to analyze npfs
  7. The november 2021 security update review
  8. Pwn2ownaustin
  9. Our ics themed pwn2own contest returns to miami in 2022
  10. Cve 2021 28632 amp cve 2021 39840 bypassing locks in adobe reader
  11. Adding a beta nas device to pwn2own austin
  12. The october 2021 security update review
  13. Cve 2021 26420 remote code execution in sharepoint via workflow compilation

2020 14

  1. Cve 2020 7468 turning imprisonment to advantage in the freebsd ftpd chroot jail
  2. The top 5 bug submissions of 2020
  3. Cve 2020 27897 apple macos kernel oob write privilege escalation vulnerability
  4. The december 2020 security update review
  5. Detailing saltstack salt command injection vulnerabilities
  6. The november 2020 security update review
  7. Pwn2own tokyo live from toronto day three results and master of pwn
  8. Pwn2own tokyo live from toronto day two results
  9. Pwn2own tokyo live from toronto day one results
  10. Pwn2own tokyo live from toronto schedule and live results
  11. Cve 2020 16939 windows group policy dacl overwrite privilege escalation
  12. Detailing two vmware workstation toctou vulnerabilities
  13. The october 2020 security update review
  14. Cve 2019 0230 apache struts ognl remote code execution

2019 20

  1. Privilege escalation via the core shell com registrar object
  2. Regular exploitation of a tesla model 3 through chromium regexp
  3. Looking back at the impact of cve 2019 0604 a sharepoint rce
  4. Local privilege escalation in win32ksys through indexed color palettes
  5. Syncing out of the firefox sandbox
  6. The december 2019 security update review
  7. Cve 2019 9512 a microsoft windows http2 ping flood denial of service
  8. Mindshare hardware reversing with the tp link tl wr841n router part 2
  9. Diving deep into a pwn2own winning webkit bug
  10. Thanksgiving treat easy as pie windows 7 secure desktop escalation of privilege
  11. The november 2019 security update review
  12. Pwn2own tokyo 2019 day two final results
  13. Pwn2own tokyo 2019 day one results
  14. Welcome to pwn2own tokyo 2019 schedule and live updating results
  15. The little bitmap that couldnt
  16. Pwn2own miami bringing ics into the pwn2own world
  17. Cve 2019 1306 are you my index
  18. Cve 2019 12643 cisco ios xe authentication bypass vulnerability
  19. The october security update review
  20. Cve 2019 8697 macos system escalation via disk management

2018 18

  1. Zdi 18 1372 the elegant bypass
  2. Really check errors pointing to the object of your desire
  3. An insincere form of flattery impersonating users on microsoft exchange
  4. Top 5 day two electron boogaloo a case for technodiversity
  5. Seeing double exploiting a blind spot in memgc
  6. When one corruption is not enough analyzing an adobe pwn2own exploit
  7. The december 2018 security update review
  8. Directx to the kernel
  9. Pwn2own tokyo 2018 day two results and master of pwn
  10. Pwn2own tokyo 2018 day two schedule and updates
  11. The november 2018 security update review
  12. Pwn2own tokyo 2018 day one results
  13. Welcome to pwn2own tokyo 2018 day one
  14. Updates and new targets available in the targeted incentive program
  15. Preventative patching produces pwn2own participants panic
  16. Cve 2018 4338 triggering an information disclosure on macos through a broadcom airport kext
  17. Cve 2018 8460 exposing a double free in internet explorer for code execution
  18. The october 2018 security update review

2017 18

  1. A matching pair of use after free bugs in chakra asmjs
  2. Vmwares launch escape system
  3. Invariantly exploitable input an apple safari bug worth revisiting
  4. Apache groovy deserialization a cunning exploit chain to bypass a patch
  5. Reading backwards controlling an integer underflow in adobe reader
  6. Remote root in directvs wireless video bridge a tale of rage and despair
  7. The december 2017 security update review
  8. Exploiting untrusted objects through deserialization analyzing 1 of 100 hpe bug submissions
  9. The november 2017 security update review
  10. The results mobile pwn2own 2017 day two
  11. Welcome to mobile pwn2own 2017 day two
  12. The results mobile pwn2own day one
  13. Welcome to mobile pwn2own 2017 day one
  14. On the trail to mobile pwn2own
  15. Wrapping the converter within foxit reader
  16. The october 2017 security update review
  17. Vmware escapology how to houdini the hypervisor
  18. Check it out enforcement of bounds checks in native jit code

Undated 275

  1. Cve 2022 29844 a classic buffer overflow on the western digital my cloud pro series pr4100
  2. The april 2023 security update review
  3. Bash privileged mode vulnerabilities in parallels desktop and cdpath handling in macos
  4. Pwn2own vancouver 2023 the results and master of pwn are in
  5. Pwn2own vancouver 2023 day two results
  6. Pwn2own vancouver 2023 day one results
  7. Pwn2own vancouver schedule 2023
  8. The march 2023 security update review
  9. Cve 2022 38108 rce in solarwinds network performance monitor
  10. Pwn2own miami 2023 the results are in
  11. Pwn2own miami 2023 day two results
  12. The february 2023 security update overview
  13. Pwn2own miami 2023 day one results
  14. Pwn2own miami 2023 the full schedule
  15. Pwn2owning two hosts at the same time abusing inductive automation ignitions custom deserialization
  16. Pwn2own automotive bringing researchers and auto manufacturers together
  17. Activation context cache poisoning exploiting csrss for privilege escalation
  18. Cve 2022 35690 unauthenticated rce in adobe coldfusion
  19. Announcing pwn2own vancouver for 2023
  20. The january 2023 security update review
  21. Looking back at the bugs of 2022
  22. Mindshare analyzing bsd kernels with binary ninja
  23. The september 2022 security update review
  24. Riding the inforail to exploit ivanti avalanche part 2
  25. Cve 2022 34715 more microsoft windows nfs v4 remote code execution
  26. Announcing pwn2own toronto 2022 and introducing the soho smashup
  27. But you told me you were safe attacking the mozilla firefox renderer part 2
  28. But you told me you were safe attacking the mozilla firefox renderer part 1
  29. New disclosure timelines for bugs from faulty patches
  30. The august 2022 security update review
  31. Looking at patch gap vulnerabilities in the vmware esxi tcpip stack
  32. Riding the inforail to exploit ivanti avalanche
  33. Cve 2022 30136 microsoft windows network file system v4 remote code execution vulnerability
  34. The july 2022 security update review
  35. Cve 2022 23088 exploiting a heap overflow in the freebsd wi fi stack
  36. The june 2022 security update review
  37. Cve 2022 26937 microsoft windows network file system nlm portmap stack buffer overflow
  38. Is exploiting a null pointer deref for lpe just a pipe dream
  39. Pwn2own vancouver 2022 the results and master of pwn
  40. Pwn2own vancouver 2022 the schedule
  41. The may 2022 security update review
  42. What to expect when exploiting a guide to pwn2own participation
  43. Pwn2own miami 2022 results and master of pwn
  44. P2omiami 2022 schedule
  45. The april 2022 security update review
  46. Cve 2022 26381 gone by others triggering a uaf in firefox
  47. Abusing arbitrary file deletes to escalate privilege and other great tricks
  48. The march 2022 security update review
  49. Clang checkers and codeql queries for detecting untrusted pointer derefs and tainted loop conditions
  50. Static taint analysis using binary ninja a case study of mysql cluster vulnerabilities
  51. Mindshare when mysql cluster encounters taint analysis
  52. The february 2022 security update review
  53. Cve 2021 44142 details on a samba code execution bug demonstrated at pwn2own austin
  54. Cve 2021 44790 code execution on apache via an integer underflow
  55. Looking back at the zero day initiative in 2021
  56. Cve 2021 21661 exposing database info via wordpress sql injection
  57. Pwn2own vancouver 2022 luanch
  58. The january 2022 security update review
  59. The top 5 bugs submitted in 2021
  60. Cve 2021 26084 details on the recently exploited atlassian confluence ognl injection bug
  61. The september 2021 security update review kpgpb
  62. Analysis of a parallels desktop stack clash vulnerability and variant hunting using binary ninja
  63. Cve 2021 2429 a heap based buffer overflow bug in the mysql innodb memcached plugin
  64. Proxytoken an authentication bypass in microsoft exchange server
  65. From pwn2own 2021 a new attack surface on microsoft exchange proxyshell
  66. Pwn2own austin 2021 phones printers nas and more
  67. The august 2021 security update review
  68. Cve 2021 27077 selecting bitmaps into mismatched device contexts
  69. Cve 2021 31969 underflowing in the clouds
  70. The july 2021 security update review
  71. Cve 2021 28474 sharepoint remote code execution via server side control interpretation conflict
  72. Cve 2021 26892 an authorization bypass on the microsoft windows efi system partition
  73. Cve 2021 1497 cisco hyperflex hx auth handling remote command execution
  74. Zdi 21 502 an information disclosure bug in isc bind server
  75. The june 2021 security update review
  76. Cve 2021 31181 microsoft sharepoint webpart interpretation conflict remote code execution vulnerability
  77. Cve 2021 31440 an incorrect bounds calculation in the linux kernel ebpf verifier
  78. Cve 2021 22909 digging into a ubiquiti firmware update bug
  79. Cve 2021 31166 a wormable code execution bug in httpsys
  80. The may 2021 security update review
  81. Cve 2021 26900 privilege escalation via a use after free vulnerability in win32k
  82. Parallels desktop rdpmc hypercall interface and vulnerabilities
  83. Cve 2021 20226 a reference counting bug in the linux kernel iouring subsystem
  84. The april 2021 security update review
  85. Pwn2own 2021 schedule and live results
  86. Cve 2021 25646 getting code execution on apache druid
  87. Cve 2021 27076 a replay style deserialization attack against sharepoint
  88. The battle between white box and black box bug hunting in wireless routers
  89. The march 2021 security update review
  90. Cve 2020 3992 amp cve 2021 21974 pre auth remote code execution in vmware esxi
  91. Cve 2020 8625 a fifteen year old rce bug returns in isc bind server
  92. Zdi 21 171 getting information disclosure in adobe reader through the id tag
  93. Three more bugs in orions belt
  94. The february 2022 security update review
  95. Zdi can 12671 windows kernel dosprivilege escalation via a null pointer deref
  96. Announcing pwn2own vancouver 2021
  97. Three bugs in orions belt chaining multiple bugs for unauthenticated rce in the solarwinds orion platform
  98. Zdi 20 1440 an incorrect calculation bug in the linux kernel ebpf verifier
  99. Looking back at the zero day initiative in 2020
  100. The january 2021 security update review
  101. Mindshare analysis of vmware workstation and esxi using debug symbols from flings
  102. The anatomy of a bug door dissecting two d link router authentication bypasses
  103. Exploiting other remote protocols in ibm websphere
  104. Cve 2020 9496 rce in apache ofbiz xmlrpc via deserialization of untrusted data
  105. Performing sql backflips to achieve code execution on schneider electrics ecostruxure operator terminal expert at pwn2own miami 2020
  106. The september 2020 security update review
  107. Cve 2020 9715 exploiting a use after free in adobe reader
  108. Cve 2020 7460 freebsd kernel privilege escalation
  109. Introducing cwe 1265 a new way to understand vulnerable reentrant control flows
  110. Cve 2020 10611 achieving code execution on the triangle microworks scada data gateway
  111. 15 years of the zero day initiative
  112. Windows print spooler patch bypass re enables persistent backdoor
  113. The august 2020 security update review
  114. Announcing pwn2own tokyo 2020 live from toronto
  115. Chaining 5 bugs for code execution on the rockwell factorytalk hmi at pwn2own miami
  116. Abusing java remote protocols in ibm websphere
  117. The july 2020 security update review
  118. Cve 2020 1300 remote code execution through microsoft windows cab files
  119. Cve 2020 7454 killing two systems with one bug in libalias
  120. Zdi 20 709 heap overflow in the netgear nighthawk r6700 router
  121. Our cve story bringing our zdi community to the cve community
  122. Cve 2020 1181 sharepoint remote code execution through web parts
  123. A trio of bugs used to exploit inductive automation at pwn2own miami
  124. The june 2020 security update review
  125. Mindshare how to just emulate it with qemu
  126. Cve 2020 8871 privilege escalation in parallels desktop via vga device
  127. The may 2020 security update review
  128. Details on the oracle weblogic vulnerability being exploited in the wild
  129. How a deceptive assert caused a critical windows kernel vulnerability
  130. Analyzing a trio of remote code execution bugs in intel wireless adapters
  131. Cve 2020 0932 remote code execution on microsoft sharepoint using typeconverters
  132. Mindshare using lldbinit to enhance the lldb debugger
  133. Cve 2020 8835 linux kernel privilege escalation via improper ebpf program verification
  134. The april 2020 security update review
  135. Exploiting the tp link archer c7 at pwn2own tokyo
  136. Cve 2020 3947 use after free vulnerability in the vmware workstation dhcp component
  137. Cve 2020 0729 remote code execution through lnk files
  138. Pwn2own day two results and master of pwn
  139. Pwn2own 2020 day one results
  140. Welcome to pwn2own 2020 the schedule and live results
  141. Regarding pwn2own vancouver
  142. The march 2020 security update review
  143. Cve 2020 2555 rce through a deserialization bug in oracles weblogic server
  144. Announcing remote participation in pwn2own vancouver
  145. Cve 2020 0688 remote code execution on microsoft exchange server through fixed cryptographic keys
  146. Submission advice for security researchers
  147. The february 2020 security update review
  148. Announcing a targeted incentive program for selected trend micro products
  149. Mindshare dealing with encrypted router firmware
  150. Looking back at the zero day initiative in 2019
  151. Pwn2own miami 2020 schedule and live results
  152. Reliably finding and exploiting icsscada bugs
  153. The january 2020 security update review
  154. Pwn2own returns to vancouver for 2020
  155. Cve 2019 0801 microsoft office uri hyperlink hijinks
  156. Cve 2019 1257 code execution on microsoft sharepoint through bdc deserialization
  157. Patch analysis examining a missing dot dot in oracle weblogic
  158. The september 2019 security update review
  159. Mindshare hardware reversing with the tp link tl wr841n router
  160. Announcing pwn2own tokyo for 2019
  161. Cve 2019 12527 code execution on squid proxy through a heap buffer overflow
  162. Taking control of vmware through the universal host control interface part 2
  163. The august 2019 security update review
  164. Wipe out hanging more than ten on your old belkin surf router
  165. Cve 2019 7839 coldfusion code execution through jnbridge
  166. Mindshare automated bug hunting by modeling vulnerable code
  167. The july 2019 security update review
  168. The left branch less travelled a story of a mozilla firefox use after free vulnerability
  169. Remote code execution via ruby on rails active storage insecure deserialization
  170. Exploiting the windows task scheduler through cve 2019 1069
  171. The june 2019 security update review
  172. Mindshare hardware reversing with the belkin surf n300 router
  173. Cve 2019 0708 a comprehensive analysis of a remote desktop services vulnerability
  174. Rce without native code exploitation of a write what where in internet explorer
  175. The may 2019 security update review
  176. Updates and enhancement to the targeted incentive program
  177. Taking control of vmware through the universal host controller interface part 1
  178. Cve 2019 0726 an rce vulnerability in the windows 10 dhcp client
  179. The story of two winning pwn2own jit vulnerabilities in mozilla firefox
  180. A series of unfortunate images drupal 1 click to rce exploit chain detailed
  181. The april 2019 security update review
  182. Loading up a pair of qt bugs detailing cve 2019 1636 and cve 2019 6739
  183. Pwn2own vancouver 2019 wrapping up and rolling out
  184. Pwn2own vancouver 2019 day two results
  185. Pwn2own vancouver 2019 day schedule results and live results
  186. Pwn2own vancouver 2019 day one results
  187. Pwn2own vancouver 2019 the schedule and live results
  188. The apple bug that fell near the webkit tree
  189. Cve 2019 0604 details of a microsoft sharepoint rce vulnerability
  190. The march 2019 security update review
  191. Webaccess uncontrol
  192. Finding unicorns when the c compiler writes the vuln
  193. The february 2019 security update review
  194. Using the weblinks api to reach javascript uafs in adobe reader
  195. Implementing fuzz logics with dharma
  196. Of isos and attorneys legal action in vulnerability disclosure
  197. The zdi 2018 retrospective
  198. Pwn2own vancouver 2019 tesla vmware microsoft and more
  199. The january 2019 security update review
  200. Onix finding pokmon in your acrobat revealing a new attack surface
  201. Cve 2018 15421 examining a stack based overflow in the cisco webex network recording player
  202. Zdi can 6135 a remote code execution vulnerability in the microsoft windows jet database engine
  203. Cve 2018 12794 using type confusion to get code execution in adobe reader
  204. Pivot pivot reaching unreachable vulnerable code in industrial iot platforms
  205. The september 2018 security update review
  206. Announcing pwn2own tokyo for 2018
  207. Virtualbox 3d acceleration an accelerated attack surface
  208. Floating poison math in chakra
  209. Voicemail vandalism getting remote code execution on microsoft exchange server
  210. The august 2018 security update review
  211. Throwing shade analysis of a foxit integer overflow
  212. Announcing the targeted incentive program a special award for special targets
  213. Mindshare an introduction to pykd
  214. The july 2018 security update review
  215. Checking in a look back at the first half of 2018
  216. Mindshare variant hunting with ida python
  217. Analyzing an integer overflow in bitdefender av part 2 the exploit
  218. Analyzing an integer overflow in bitdefender av part 1 the vulnerability
  219. The june 2018 security update review
  220. Down the rabbit hole a deep dive into an attack on an rpc interface
  221. Malicious intent using adobe acrobats ocg setintent
  222. Mindshare walking the windows kernel with ida python
  223. Its time to terminate the terminator
  224. The may 2018 security update review
  225. Running with scissors the dangers of cutting and pasting sample code
  226. When java throws you a lemon make limenade sandbox escape by type confusion
  227. Inverting your assumptions a guide to jit comparisons
  228. The april 2018 security update review
  229. Quickly pwned quickly patched details of the mozilla pwn2own exploit
  230. Tales from hallwaycon busting myths over adult beverages
  231. Pwn2own 2018 day two results and master of pwn
  232. Pwn2own 2018 day two schedule
  233. Pwn2own 2018 results from day one
  234. Welcome to pwn2own 2018 the schedule
  235. The march 2018 security update review
  236. Testing for truthiness exploiting improper checks
  237. Vmware exploitation through uninitialized buffers
  238. The february 2018 security update review
  239. Pushing webkits buttons with a mobile pwn2own exploit
  240. One mans patch is another mans treasure a tale of a failed hpe patch
  241. Pwn2own returns for 2018 partners with microsoft and sponsored by vmware
  242. Automating vmware rpc request sniffing
  243. The january 2018 security update review
  244. The zdi 2017 retrospective
  245. Duck assisted code execution in emc data protection advisor
  246. Simple to find simple to fix locating weak file permissions in advantech webaccess
  247. The september 2017 security update review
  248. Getting into submitting how to maximize your research submissions
  249. Mobile pwn2own 2017 returns to tokyo
  250. Deconstructing a winning webkit pwn2own entry
  251. Busting myths in foxit reader
  252. The blue frost security challenge an exploitation journey for fun and free drinks
  253. The august 2017 security update review
  254. Pythonizing the vmware backdoor
  255. Understanding risk in the unintended giant javascript
  256. The july 2017 security update review
  257. Use after silence exploiting a quietly patched uaf in vmware
  258. The june 2017 security update review
  259. Hacker machine interface the state of scada hmi security
  260. The may 2017 apple security update review
  261. The may 2017 security update review
  262. Auditing adobe reader the open source attack surface in closed source software
  263. The april 2017 security update review
  264. Pwn2own 2017 an event for the ages
  265. The results pwn2own 2017 day three
  266. The results pwn2own 2017 day two
  267. Pwn2own 2017 day three schedule and results
  268. The results pwn2own 2017 day one
  269. Pwn2own 2017 day two schedule and results
  270. Welcome to pwn2own 2017 the schedule
  271. The march 2017 security update review
  272. Pwn2own the root of research
  273. Pwn2own returns for 2017 to celebrate 10 years of exploits
  274. January 2017 security update review
  275. Zdi 2016 retrospective