The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING
Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend
Blog post

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend

The November 2022 Security Update Review
Blog post

The November 2022 Security Update Review

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading
Blog post

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection
Blog post

CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection

The October 2022 Security Update Review
Blog post

The October 2022 Security Update Review

MindShaRE: Analyzing BSD Kernels for Uninitialized Memory Disclosures using Binary Ninja
Blog post

MindShaRE: Analyzing BSD Kernels for Uninitialized Memory Disclosures using Binary Ninja

The September 2022 Security Update Review
Blog post

The September 2022 Security Update Review

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2
Blog post

Riding the InfoRail to Exploit Ivanti Avalanche – Part 2

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution
Blog post

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution

Announcing Pwn2Own Toronto 2022 and Introducing the SOHO Smashup!
Blog post

Announcing Pwn2Own Toronto 2022 and Introducing the SOHO Smashup!