30 October 2024
An analysis of the Keycloak authentication system
Earlier this year, I was working […]
9 October 2024
Exploiting AMD atdcm64a.sys arbitrary pointer dereference – Part 3
In the previous part of the […]
2 October 2024
Exploiting AMD atdcm64a.sys arbitrary pointer dereference – Part 2
Welcome back! We concluded the previous […]
25 September 2024
Exploiting AMD atdcm64a.sys arbitrary pointer dereference – Part 1
After attending the OST2 – Exp4011 […]
28 May 2024
Multiple vulnerabilities in Eclipse ThreadX
“Why don’t you pick on projects […]
7 May 2024
Multiple vulnerabilities in RIOT OS
“Where there is parsing, there are […]
5 March 2024
Multiple vulnerabilities in RT-Thread RTOS
“Security is in the mind of […]
7 November 2023
OST2, Zephyr RTOS, and a bunch of CVEs
“When hackers tell me it’s so […]
18 January 2023
Nothing new under the Sun – Discovering and exploiting a CDE bug chain
“What has been will be again, […]
22 August 2022
Useless path traversals in Zyxel admin interface (CVE-2022-2030)
During our analysis of Zyxel’s device […]
26 July 2022
Zyxel authentication bypass patch analysis (CVE-2022-0342)
A few months ago, new firmware […]
7 June 2022
Multiple vulnerabilities in Zyxel zysh
“We live on a placid island […]