Exploit Development

1

Pixel GPU Exploit: A kernel exploit for Pixel7/8 Pro with Android 14 (github.com)

submitted 6 months ago by ColdPints@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

2

1

Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991 (qriousec.github.io)

submitted 6 months ago by ColdPints@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

3

1

From Terminal Output to Arbitrary Remote Code Execution (blog.solidsnail.com)

submitted 1 year ago by solidsnail@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

cross-posted from: https://infosec.pub/post/2466014

This is my first write-up, on a vulnerability I discovered in iTerm2 (RCE). Would love to hear opinions on this. I tried to make the writing engaging.

4

1

No More Speculation: Exploiting CPU Side-Channels for Real (bughunters.google.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

5

1

Diving into Windows Remote Access Service for Pre-Auth Bugs (www.blackhat.com)

submitted 1 year ago* (last edited 1 year ago) by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

6

1

iOS 17: New Version, New Acronyms (www.df-f.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

7

1

You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine (cfp.recon.cx)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

8

1

Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox (medium.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

9

1

In-depth Analysis of the CVE-2023-29300 Adobe ColdFusion Serialization Vulnerability (github.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

10

1

[Chrome] CVE-2023-2033 (github.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

11

1

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers (www.zerodayinitiative.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

12

1

An Introduction to Exploit Reliability (blog.isosceles.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

13

1

MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis (securityintelligence.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

14

1

Summary: MTE As Implemented (googleprojectzero.blogspot.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

15

1

All known API based kernel address leaks on Windows no longer work (twitter.com)

submitted 1 year ago* (last edited 1 year ago) by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

16

1

CVE-2023-3389 - Exploiting a vulnerability in the io_uring subsystem of the Linux kernel (qyn.app)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

17

1

Escaping the Google kCTF Container with a Data-Only Exploit (h0mbre.github.io)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

18

1

The Legacy of Stagefright (blog.isosceles.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

19

1

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray (starlabs.sg)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

20

1

CVE-2023-35086 POC - ASUS routers format string vulnerability [DOS] (github.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

21

1

A new method for container escape using file-based DirtyCred (starlabs.sg)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

22

1

[Chrome] UAF in MLGraphXnnpack::BuildOnBackgroundThread (reward: $11000) (crbug.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

23

1

Zenbleed (lock.cmpxchg8b.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

24

1

[Chrome ITW sandbox escape] Integer overflow in SkSLVMCodeGenerator (skia) (bugs.chromium.org)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink

25

1

Exploiting MikroTik RouterOS Hardware with CVE-2023-30799 - Blog - VulnCheck (vulncheck.com)

submitted 1 year ago by udunadan@infosec.pub to c/exploitdev@infosec.pub

0 comments fedilink