Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING

CVE-2021-1497: Cisco HyperFlex HX Auth Handling Remote Command Execution

Blog post

CVE-2021-1497: Cisco HyperFlex HX Auth Handling Remote Command Execution

June 23, 2021
Cisco, HyperFlex, Research

CVE-2021-31440: An Incorrect Bounds Calculation in the Linux Kernel eBPF Verifier

Blog post

CVE-2021-31440: An Incorrect Bounds Calculation in the Linux Kernel eBPF Verifier

May 27, 2021
Linux, Kernel, eBPF

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

Blog post

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

April 22, 2021
Linux, Research

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

Blog post

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

January 19, 2021
Linux, Research, 0-day

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification

Blog post

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification

April 16, 2020
Linux, Pwn2Own, Exploit, LPE

CVE-2019-12643: Cisco IOS XE Authentication Bypass Vulnerability

Blog post

CVE-2019-12643: Cisco IOS XE Authentication Bypass Vulnerability

October 18, 2019
Cisco, Research

Loading up a pair of Qt bugs: Detailing CVE-2019-1636 and CVE-2019-6739

Blog post

Loading up a pair of Qt bugs: Detailing CVE-2019-1636 and CVE-2019-6739

April 03, 2019
Qt, Cisco, Malwarebytes, Research

CVE-2018-15421 – Examining a Stack-based Overflow in the Cisco Webex Network Recording Player

Blog post

CVE-2018-15421 – Examining a Stack-based Overflow in the Cisco Webex Network Recording Player

September 27, 2018
Cisco, Research, Webex

The June 2017 Security Update Review

Blog post

The June 2017 Security Update Review

June 13, 2017
Microsoft, Adobe, Security Patch, Cisco