EUVD-2011-1422

Malware in sbrugna...

EUVD-2013-2495

Malware in sbrugna...

EUVD-2011-1351

Malware in sbrugna...

EUVD-2011-1354

Malware in sbrugna...

EUVD-2010-1151

Malware in sbrugna...

EUVD-2014-0543

Malware in sbrugna...

EUVD-2017-16222

Malware in sbrugna...

EUVD-2013-2491

Malware in sbrugna...

EUVD-2009-1045

Malware in sbrugna...

EUVD-2013-2492

Malware in sbrugna...

(Pwn2Own) Microsoft Windows win32kbase Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

PT-2025-31439 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera affected versions not specified Description: The Lorex 2K Indoor Wi-Fi Security Camera is susceptible to a stack-based buffer overflow, potentially leading to remote code execution. This issue was...

pwn2own2018

Pwn2Own 2018: Safari + macOS Safari RCE, sandbox escape, and LPE to kernel for macOS 10.13.3. Usage Install nasm and tornado: brew install nasm pip3 install tornado Check config.py if you want to change the host or ports. Afterwards start the server with ./server.py and navigate to the shown URL...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds === This repository contains information, exploits, scripts, etc, that I have made public and it is located at https://github.com/pedrib/PoC. advisories: all my public advisories, research notes, etc Pwn2Own: advisories related to my Pwn2Own...

PT-2025-25247 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial affected versions not specified Description: The issue is related to a stack-based buffer overflow in the ble process esp32 msg function, allowing for remote code execution. This was demonstrated at...

PT-2025-25242 · Autel · Autel Maxicharger Ac Wallbox

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox affected versions not specified Description: The issue concerns an Incorrect Authorization Privilege Escalation Vulnerability in the Commercial Technician API of the Autel MaxiCharger AC Wallbox. This was discover...

PT-2025-25249 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial autocharge affected versions not specified Description: The issue is a stack-based buffer overflow that allows for remote code execution. It was discovered by Tobias Scharnowski, Felix Buchmann, and...

PT-2025-25248 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial affected versions not specified Description: The issue is related to a buffer overflow that allows remote code execution. This was demonstrated at Pwn2Own. Recommendations: At the moment, there is no...

PT-2025-25258 · Sony · Sony Xav-Ax8500

Name of the Vulnerable Software and Affected Versions: Sony XAV-AX8500 affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Bluetooth AVCTP protocol, which can lead to remote code execution. This was demonstrated at Pwn2Own. Recommendations: At...

PT-2025-25254 · Sony · Sony Xav-Ax8500

Name of the Vulnerable Software and Affected Versions: Sony XAV-AX8500 affected versions not specified Description: The issue is related to an integer overflow in Bluetooth packet handling, which can lead to remote code execution. This was demonstrated at Pwn2Own. Recommendations: At the moment,...