Tags
How an out-of-bounds read in MariaDB's .frm metadata parser can be turned into a forged C++ object with a fake vtable, reaching arbitrary code execution as the mariadbd process (MDEV-40571).
Read full articleAnalysis of a type confusion vulnerability caused by a missing global-property Map stability check in V8's TurboFan JIT, plus a Windows RCE exploit
Read full articleAnalysis of CVE-2021-26411, a UAF vulnerability in the Internet Explorer JavaScript engine that the Lazarus Group exploited in real-world attacks
Read full articleA command injection vulnerability found in the WPS PIN handling of the E5600 router — authenticated remote code execution via a crafted WPS PIN parameter
Read full articleAnalysis of an Integer Overflow (SMBGhost) and an uninitialized kernel memory leak (SMBleed) in the SMBv3.1.1 decompression routine, and a Pre-Auth RCE achieved by chaining the two bugs
Read full article