Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING
Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch
Blog post

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch

Reading Backwards – Controlling an Integer Underflow in Adobe Reader
Blog post

Reading Backwards – Controlling an Integer Underflow in Adobe Reader

Exploiting Untrusted Objects through Deserialization: Analyzing 1 of 100+ HPE Bug Submissions
Blog post

Exploiting Untrusted Objects through Deserialization: Analyzing 1 of 100+ HPE Bug Submissions

On the Trail to Mobile Pwn2Own
Blog post

On the Trail to Mobile Pwn2Own

Wrapping the Converter within Foxit Reader
Blog post

Wrapping the Converter within Foxit Reader

Check it Out: Enforcement of Bounds Checks in Native JIT Code
Blog post

Check it Out: Enforcement of Bounds Checks in Native JIT Code

VMware Escapology – How to Houdini the Hypervisor
Blog post

VMware Escapology – How to Houdini the Hypervisor

Duck-Assisted Code Execution in EMC Data Protection Advisor
Blog post

Duck-Assisted Code Execution in EMC Data Protection Advisor

Simple to Find, Simple to Fix – Locating Weak File Permissions in Advantech WebAccess
Blog post

Simple to Find, Simple to Fix – Locating Weak File Permissions in Advantech WebAccess

Busting Myths in Foxit Reader
Blog post

Busting Myths in Foxit Reader