Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING
MindshaRE: Using Binary Ninja API to Detect Potential Use-After-Free Vulnerabilities
Blog post

MindshaRE: Using Binary Ninja API to Detect Potential Use-After-Free Vulnerabilities

CVE-2024-43639: Remote Code Execution in Microsoft Windows KDC Proxy
Blog post

CVE-2024-43639: Remote Code Execution in Microsoft Windows KDC Proxy

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks (Archive)
Blog post

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks (Archive)

CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability
Blog post

CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability

MindShaRE: Analyzing BSD Kernels for Uninitialized Memory Disclosures using Binary Ninja
Blog post

MindShaRE: Analyzing BSD Kernels for Uninitialized Memory Disclosures using Binary Ninja

CVE-2022-26937: Microsoft Windows Network File System NLM Portmap Stack Buffer Overflow
Blog post

CVE-2022-26937: Microsoft Windows Network File System NLM Portmap Stack Buffer Overflow

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks
Blog post

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

Static Taint Analysis using Binary Ninja: A Case Study of MySQL Cluster Vulnerabilities
Blog post

Static Taint Analysis using Binary Ninja: A Case Study of MySQL Cluster Vulnerabilities

CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts
Blog post

CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts

CVE-2021-31969: Underflowing in the Clouds
Blog post

CVE-2021-31969: Underflowing in the Clouds