Reviewing the Attack Surface of the Autel MaxiCharger: Part Two

January 16, 2025 | Connor Ford CONTINUE READING

Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform

Blog post

Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform

July 01, 2024
Logsign, Research, Exploit

The June 2024 Security Update Review

Blog post

The June 2024 Security Update Review

June 11, 2024
Security Patch, Adobe, Microsoft

CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud

Blog post

CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud

May 30, 2024
SharePoint, Microsoft, Research

MindShaRE: Decapping Chips for Electromagnetic Fault Injection (EMFI)

Blog post

MindShaRE: Decapping Chips for Electromagnetic Fault Injection (EMFI)

May 23, 2024
MindshaRE, Hardware, Research

The May 2024 Security Update Review

Blog post

The May 2024 Security Update Review

May 14, 2024
Apple, Security Patch, Microsoft, Adobe

CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own

Blog post

CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own

May 09, 2024
Pwn2Own, Oracle, VirtualBox

CVE-2024-2887: A Pwn2Own Winning Bug in Google Chrome

Blog post

CVE-2024-2887: A Pwn2Own Winning Bug in Google Chrome

May 02, 2024
Pwn2Own, Chrome, Edge

CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability

Blog post

CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability

April 17, 2024
Windows, RAR, Research

The April 2024 Security Updates Review

Blog post

The April 2024 Security Updates Review

April 09, 2024
Adobe, Security Patch, Microsoft

Pwn2Own Vancouver 2024 - Day Two Results

Blog post

Pwn2Own Vancouver 2024 - Day Two Results

March 21, 2024
Pwn2Own, Microsoft, Mozilla, Docker, VMware, Linux, Oracle