Skip Navigation

User banner
udunadan
udunadan @ udunadan @infosec.pub
Posts
65
Comments
2
Joined
2 yr. ago

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub
Chrome ITW sandbox escape

Integer overflow in SkSLVMCodeGenerator (skia)
bugs.chromium.org /p/chromium/issues/detail
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Exploiting MikroTik RouterOS Hardware with CVE-2023-30799 - Blog - VulnCheck
vulncheck.com /blog/mikrotik-foisted-revisited
Exploiting MikroTik RouterOS Hardware with CVE-2023-30799 - Blog - VulnCheck
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub
Linux kernel eBPF

CVE-2023-2163 PoC
github.com /google/security-research/tree/master/pocs/linux/cve-2023-2163
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Shifting boundaries: Exploiting an Integer Overflow in Apple Safari - Exodus Intelligence
blog.exodusintel.com /2023/07/20/shifting-boundaries-exploiting-an-integer-overflow-in-apple-safari/
Shifting boundaries: Exploiting an Integer Overflow in Apple Safari - Exodus Intelligence
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Zero Day Initiative — CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability
www.zerodayinitiative.com /blog/2023/7/19/cve-2023-36934-progress-software-moveit-transfer-sql-injection-remote-code-execution-vulnerability
Zero Day Initiative — CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

TheHole New World - how a small leak will sink a great browser (CVE-2021-38003)
starlabs.sg /blog/2022/12-the-hole-new-world-how-a-small-leak-will-sink-a-great-browser-cve-2021-38003/
TheHole New World - how a small leak will sink a great browser (CVE-2021-38003)
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub
Chrome

Heap-use-after-free in ExclusiveAccessBubbleViews::UpdateBounds (reward: $10000)
crbug.com /1426521
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

V8 Sandbox - Code Pointer Sandboxing
docs.google.com /document/d/1CPs5PutbnmI-c5g7e_Td9CNGh5BvpLleKCqUnqmD82k/edit
V8 Sandbox - Code Pointer Sandboxing
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

TALOS-2023-1757 Foxit Reader Field OnBlur event use-after-free vulnerability
talosintelligence.com /vulnerability_reports/TALOS-2023-1757
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

CVE-2023-28754 Apache ShardingSphere RCE (SnakeYAML Deserialization)
www.openwall.com /lists/oss-security/2023/07/19/3
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub
Chrome

oob write in vrend_renderer_transfer_write_iov (reward: $15000)
bugs.chromium.org /p/chromium/issues/detail
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub
Chrome

Race Condition UAF in amdtee_open_session (reward: $10000)
bugs.chromium.org /p/chromium/issues/detail
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Anatomy of Lockdown Mode
blacktop.github.io /presentations/0x41con_2023/HTML/index.html
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

CVE-2023-2033: Chrome [0-day] JIT optimisation issue
bugs.chromium.org /p/chromium/issues/detail
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent
blog.qualys.com /vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent
CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Microsoft Edge MSDCPDF Javascript addIcon type confusion vulnerability
www.talosintelligence.com /vulnerability_reports/TALOS-2023-1747
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Analysis of CVE-2023-28252 CLFS Vulnerability
www.coresecurity.com /core-labs/articles/analysis-cve-2023-28252-clfs-vulnerability
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Dirty Pagetable: A Novel Exploitation Technique To Rule Linux Kernel
yanglingxi1993.github.io /dirty_pagetable/dirty_pagetable.html
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub
Android

exploiting CVE-2019-2215 (Bad binder)

cutesmilee.github.io /kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

The Old, The New and The Bypass - One-click/Open-redirect to own Samsung S22 at Pwn2Own 2022
starlabs.sg /blog/2023/06-the-old-the-new-and-the-bypass-one-clickopen-redirect-to-own-samsung-s22-at-pwn2own-2022/
The Old, The New and The Bypass - One-click/Open-redirect to own Samsung S22 at Pwn2Own 2022