Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

Blog post

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

December 18, 2021
Log4j, Apache, Research

CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug

Blog post

CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug

September 22, 2021
Atlassian, Research, Exploit

CVE-2021-1497: Cisco HyperFlex HX Auth Handling Remote Command Execution

Blog post

CVE-2021-1497: Cisco HyperFlex HX Auth Handling Remote Command Execution

June 23, 2021
Cisco, HyperFlex, Research

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

Blog post

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

May 18, 2021
Microsoft, IIS, Research

CVE-2021-25646: Getting Code Execution on Apache Druid

Blog post

CVE-2021-25646: Getting Code Execution on Apache Druid

March 29, 2021
Apache, Druid, Research

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

Blog post

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

October 07, 2020
Apache, Research, Struts

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

Blog post

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

September 16, 2020
Apache, Research

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

Blog post

CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files

July 09, 2020
Microsoft, Windows, Research

CVE-2020-0729: Remote Code Execution Through .LNK Files

Blog post

CVE-2020-0729: Remote Code Execution Through .LNK Files

March 26, 2020
Microsoft, Research, Security Patch

CVE-2019-9512 – A Microsoft Windows HTTP/2 Ping Flood Denial of Service

Blog post

CVE-2019-9512 – A Microsoft Windows HTTP/2 Ping Flood Denial of Service

December 05, 2019
Research, HTTP, DoS