The July 2023 Security Update Review It’s the second Tuesday of the month, which means Adobe and Microsoft have released their latest s... 2023-7-12 01:30:6 | 阅读: 31 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft attacker remote windows bypass

CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs In this excerpt of a Trend Micro Vulnerability Researc... 2023-6-29 23:58:49 | 阅读: 51 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com serialized aria loginsight lang3

CVE-2022-31696: An Analysis of a VMware ESXi TCP Socket Keepalive Type Confusion LPE Last year we published our patch gap analysis of ESXi’s... 2023-6-23 00:0:0 | 阅读: 32 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com freebsd timers memory callout vmkernel

The June 2023 Security Update Review It’s the second Tuesday of the month, which means Adobe and Microsoft have released their latest... 2023-6-14 01:28:34 | 阅读: 17 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft attacker bypass exchange remote

Adventures in Disclosure: When Reporting Bugs Goes Wrong The Zero Day Initiative (ZDI) is the world’s largest vendor-agnostic bug bounty program. That mea... 2023-6-8 23:46:1 | 阅读: 16 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com zdi disclose psirt disclosing hopefully

CVE-2023-24941: Microsoft Network File System Remote Code Execution In this excerpt of a Trend Micro Vulnerability Researc... 2023-6-1 23:0:0 | 阅读: 66 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com remote network nfs onc nfsv4

Exploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight During Pwn2Own Toronto 2022, three different teams su... 2023-5-25 23:57:44 | 阅读: 22 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com smb2 pdu sonos speaker client

CVE-2023-20869/20870: Exploiting VMware Workstation at Pwn2Own Vancouver This post covers an exploit chain demonstrated by Nguy... 2023-5-18 23:50:51 | 阅读: 47 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com urb pwn2own sdp vmx attacker

The May 2023 Security Update Review It’s patch Tuesday once again, and Adobe and Microsoft have released their monthly batch of secur... 2023-5-10 01:26:34 | 阅读: 26 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft attacker windows bypass remote

CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service In this excerpt of a Trend Micro Vulnerability Research... 2023-5-3 00:9:19 | 阅读: 34 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com dhcpv6 dhcp network client microsoft

TP-Link WAN-side Vulnerability CVE-2023-1389 Added to the Mirai Botnet Arsenal Last week, the Zero Day Initiative (ZDI) threat-huntin... 2023-4-24 23:3:16 | 阅读: 88 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com 251 225 contest pwn2own security

CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100 This post covers an exploit chain demonstrated by Luca Moro (@johncool__) during Pwn2Own Toronto 202... 2023-4-20 23:0:0 | 阅读: 42 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com wd attacker western username

The April 2023 Security Update Review It’s the second Tuesday of the month, which means Adobe and Microsoft (and others) have released t... 2023-4-12 01:25:9 | 阅读: 28 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft attacker windows cves privileges

Bash Privileged-Mode Vulnerabilities in Parallels Desktop and CDPATH Handling in MacOS In the last few years, we have seen multiple vulnerabili... 2023-4-7 00:8:23 | 阅读: 17 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com privileged cdpath setuid privileges upstream

Pwn2Own Vancouver 2023 - Day Three Results Welcome to Day 3 of Pwn2Own Vancouver 2023. We’ll be updating this blog in real time as results be... 2023-3-25 02:21:15 | 阅读: 31 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com synacktiv microsoft masthoon pwn2own pacific

Pwn2Own Vancouver 2023 - Day Two Results March 23, 2023 | Dustin Childs... 2023-3-24 01:2:34 | 阅读: 17 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com pwn2own vancouver tesla microsoft payout

Pwn2Own Vancouver 2023 - Day One Results Welcome to Pwn2Own Vancouver 2023! We’ll be updating t... 2023-3-23 02:24:56 | 阅读: 47 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft tesla pwn2own pacific allotted

Pwn2Own Vancouver 2023 - The Full Schedule Welcome to Pwn2Own Vancouver for 2023! This year’s event promises some exciting research as we hav... 2023-3-22 07:43:23 | 阅读: 24 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com eop synacktiv microsoft

The March 2023 Security Update Review Happy Pi Day, and welcome to the third patch Tuesday of 2023 and the final patch Tuesday before Pw... 2023-3-15 01:29:47 | 阅读: 54 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com microsoft attacker windows cves remote

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor In this excerpt of a Trend Micro Vulnerability Research... 2023-3-1 00:40:11 | 阅读: 57 | 收藏 | Zero Day Initiative - Blog - www.thezdi.com frames rabbitmq amqp payload network