CVE-2025-23298: Getting Remote Code Execution in NVIDIA Merlin

September 24, 2025 | Peter Girnus CONTINUE READING

SolarWinds Access Rights Manager: One Vulnerability to LPE Them All

Blog post

SolarWinds Access Rights Manager: One Vulnerability to LPE Them All

December 12, 2024
SolarWinds, Research, LPE

Pwn2Own Ireland 2024: Day Two Results

Blog post

Pwn2Own Ireland 2024: Day Two Results

October 23, 2024
Pwn2Own, Samsung, Canon

Pwn2Own Toronto 2023 - The Full Schedule

Blog post

Pwn2Own Toronto 2023 - The Full Schedule

October 23, 2023
Pwn2Own, Synology, Western Digital, QNAP, Sonos, Xiaomi, Samsung

Finding Deserialization Bugs in the SolarWinds Platform

Blog post

Finding Deserialization Bugs in the SolarWinds Platform

September 21, 2023
SolarWinds, Deserialization, Research

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

Blog post

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

February 28, 2023
SolarWinds, Research, Detection Guidance

Pwn2Own Toronto 2022 - Day Three Results

Blog post

Pwn2Own Toronto 2022 - Day Three Results

December 08, 2022
Samsung, Sonos, Pwn2Own

Pwn2Own Austin 2021 - Schedule and Live Results

Blog post

Pwn2Own Austin 2021 - Schedule and Live Results

November 01, 2021
Pwn2Own, Western Digital, Synology, Cisco, TPLink, NETGEAR, Samsung

Three More Bugs in Orion’s Belt

Blog post

Three More Bugs in Orion’s Belt

February 11, 2021
SolarWinds, Research

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

Blog post

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform

January 21, 2021
SolarWinds, Exploit, Research

Pwn2Own Tokyo (Live from Toronto) - Day One Results

Blog post

Pwn2Own Tokyo (Live from Toronto) - Day One Results

November 06, 2020
Pwn2Own, Results, Samsung, Western Digital, NETGEAR, TPLink