Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING
CVE-2023-24941: Microsoft Network File System Remote Code Execution
Blog post

CVE-2023-24941: Microsoft Network File System Remote Code Execution

CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service
Blog post

CVE-2023-28231: RCE in the Microsoft Windows DHCPv6 Service

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor
Blog post

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion
Blog post

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management
Blog post

CVE-2022-40300: SQL Injection in ManageEngine Privileged Access Management

CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection
Blog post

CVE-2022-3236: Sophos Firewall User Portal and Web Admin Code Injection

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution
Blog post

CVE-2022-34715: More Microsoft Windows NFS v4 Remote Code Execution

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability
Blog post

CVE-2022-30136: Microsoft Windows Network File System v4 Remote Code Execution Vulnerability

CVE-2022-26937: Microsoft Windows Network File System NLM Portmap Stack Buffer Overflow
Blog post

CVE-2022-26937: Microsoft Windows Network File System NLM Portmap Stack Buffer Overflow

CVE-2021-44790: Code Execution on Apache via an Integer Underflow
Blog post

CVE-2021-44790: Code Execution on Apache via an Integer Underflow