Date Author Title
2024-09-24Johannes UllrichExploitation of RAISECOM Gateway Devices Vulnerability CVE-2024-7120
2024-07-16Guy BruneauWho You Gonna Call? AndroxGh0st Busters! [Guest Diary]
2023-12-20Guy BruneauHow to Protect your Webserver from Directory Enumeration Attack ? Apache2 [Guest Diary]
2023-12-16Xavier MertensAn Example of RocketMQ Exploit Scanner
2023-04-18Johannes UllrichUDDIs are back? Attackers rediscovering old exploits.
2023-03-16Xavier MertensSimple Shellcode Dissection
2022-12-22Guy BruneauExchange OWASSRF Exploited for Remote Code Execution
2022-06-10Russ McReeEPSScall: An Exploit Prediction Scoring System App
2022-05-31Xavier MertensFirst Exploitation of Follina Seen in the Wild
2022-05-07Guy BruneauPhishing PDF Received in my ISC Mailbox
2022-03-31Johannes UllrichSpring Vulnerability Update - Exploitation Attempts CVE-2022-22965
2022-02-22Xavier MertensA Good Old Equation Editor Vulnerability Delivering Malware
2022-02-01Xavier MertensAutomation is Nice But Don't Replace Your Knowledge
2022-01-25Bojan ZdrnjaLocal privilege escalation vulnerability in polkit's pkexec (CVE-2021-4034)
2021-11-26Guy BruneauSearching for Exposed ASUS Routers Vulnerable to CVE-2021-20090
2021-11-20Guy BruneauHikvision Security Cameras Potentially Exposed to Remote Code Execution
2021-10-30Guy BruneauRemote Desktop Protocol (RDP) Discovery
2021-10-16Guy BruneauApache is Actively Scan for CVE-2021-41773 & CVE-2021-42013
2021-10-09Guy BruneauScanning for Previous Oracle WebLogic Vulnerabilities
2021-06-26Guy BruneauCVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability
2021-06-12Guy BruneauFortinet Targeted for Unpatched SSL VPN Discovery Activity
2021-06-11Xavier MertensSonicwall SRA 4600 Targeted By an Old Vulnerability
2021-03-10Rob VandenBrinkSharpRDP - PSExec without PSExec, PSRemoting without PowerShell
2021-01-15Brad DuncanThrowback Friday: An Example of Rig Exploit Kit
2021-01-02Guy BruneauProtecting Home Office and Enterprise in 2021
2020-08-22Guy BruneauRemote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2020-08-08Guy BruneauScanning Activity Include Netcat Listener
2020-07-19Guy BruneauScanning Activity for ZeroShell Unauthenticated Access
2020-07-11Guy BruneauVMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html
2020-07-11Guy BruneauScanning Home Internet Facing Devices to Exploit
2020-05-16Guy BruneauScanning for Outlook Web Access (OWA) & Microsoft Exchange Control Panel (ECP)
2019-10-20Guy BruneauScanning Activity for NVMS-9000 Digital Video Recorder
2019-09-07Guy BruneauUnidentified Scanning Activity
2019-06-25Brad DuncanRig Exploit Kit sends Pitou.B Trojan
2019-06-17Brad DuncanAn infection from Rig exploit kit
2019-04-27Didier StevensQuick Tip for Dissecting CVE-2017-11882 Exploits
2019-04-22Didier Stevens.rar Files and ACE Exploit CVE-2018-20250
2018-12-23Guy BruneauScanning Activity, end Goal is to add Hosts to Mirai Botnet
2018-11-23Didier StevensVideo: Dissecting a CVE-2017-11882 Exploit
2018-09-24Didier StevensAnalyzing Encoded Shellcode with scdbg
2018-06-05Xavier MertensMalicious Post-Exploitation Batch File
2018-05-20Didier StevensDASAN GPON home routers exploits in-the-wild
2018-05-03Renato MarinhoWebLogic Exploited in the Wild (Again)
2017-09-30Lorna HutchesonWho's Borrowing your Resources?
2017-09-10Didier StevensAnalyzing JPEG files
2017-02-25Guy BruneauUnpatched Microsoft Edge and IE Bug
2017-01-07Xavier MertensUsing Security Tools to Compromize a Network
2016-04-21Daniel WesemannDecoding Pseudo-Darkleech (#1)
2016-03-13Guy BruneauA Look at the Mandiant M-Trends 2016 Report
2015-07-27Daniel WesemannAngler's best friends
2015-03-10Brad DuncanThreatglass has pcap files with exploit kit activity
2015-02-04Alex StanfordExploit Kit Evolution - Neutrino
2014-08-16Lenny ZeltserWeb Server Attack Investigation - Installing a Bot and Reverse Shell via a PHP Vulnerability
2014-07-22Daniel WesemannIvan's Order of Magnitude
2014-02-28Daniel WesemannFiesta!
2014-02-13Johannes UllrichLinksys Worm ("TheMoon") Captured
2014-02-12Johannes UllrichSuspected Mass Exploit Against Linksys E1000 / E1200 Routers
2013-10-01John Bambenek*Metaspoit Releases Module to Exploit Unpatched IE Vuln CVE-2013-3893
2013-09-20Russ McReeThreat Level Yellow: Protection recommendations regarding Internet Explorer exploits in the wild
2013-05-22Adrien de BeauprePrivilege escalation, why should I care?
2013-02-21Pedro BuenoNBC site redirecting to Exploit kit
2013-02-17Guy BruneauAdobe Acrobat and Reader Security Update Planned this Week
2013-02-13Swa FrantzenMore adobe reader and acrobat (PDF) trouble
2013-01-05Guy BruneauAdobe ColdFusion Security Advisory
2013-01-04Guy Bruneau"FixIt" Patch for CVE-2012-4792 Bypassed
2012-12-10Johannes UllrichYour CPA License has not been revoked
2012-12-02Guy BruneauZero Day MySQL Buffer Overflow
2012-08-05Daniel WesemannPhishing for Payroll with unpatched Java
2012-07-19Mark BaggettA Heap of Overflows?
2012-06-18Guy BruneauCVE-2012-1875 exploit is now available
2012-05-05Tony CarothersVulnerability Exploit for Snow Leopard
2012-04-26Richard PorterPacketstorm Security and Metasploit have Exploit code for MS12-027
2012-03-11Johannes UllrichAn Analysis of Jester's QR Code Attack. (Guest Diary)
2011-12-08Adrien de BeaupreNewest Adobe Flash 11.1.102.55 and Previous 0 Day Exploit
2011-12-06Pedro BuenoThe RedRet connection...
2011-11-22Pedro BuenoUpdates on ZeroAccess and BlackHole front...
2011-10-13Johannes UllrichCritical OS X Vulnerability Patched
2011-05-06Richard PorterUpdated Exploit Index for Microsoft
2011-03-29Daniel WesemannMalware emails with fake cellphone invoice
2011-03-15Lenny ZeltserLimiting Exploit Capabilities by Using Windows Integrity Levels
2011-03-09Kevin ShorttAVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B
2011-02-16Jason LamWindows 0-day SMB mrxsmb.dll vulnerability
2010-12-27Johannes UllrichVarious sites "Owned and Exposed"
2010-12-13Deborah HaleThe Week to Top All Weeks
2010-12-02Kevin JohnsonProFTPD distribution servers compromised
2010-11-01Manuel Humberto Santander PelaezCVE-2010-3654 exploit in the wild
2010-09-26Daniel WesemannPDF analysis paper
2010-09-14Adrien de BeaupreAdobe Flash v10.1.82.76 and earlier vulnerability in-the-wild
2010-09-13Manuel Humberto Santander Pelaez Enhanced Mitigation Experience Toolkit can block Adobe 0-day exploit
2010-09-13Manuel Humberto Santander PelaezAdobe SING table parsing exploit (CVE-2010-2883) in the wild
2010-09-02Daniel WesemannSDF, please!
2010-08-22Manuel Humberto Santander PelaezAnatomy of a PDF exploit
2010-06-15Manuel Humberto Santander PelaezMicrosoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild
2010-06-06Manuel Humberto Santander PelaezNice OS X exploit tutorial
2010-05-23Manuel Humberto Santander PelaezOracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
2010-04-10Andre LudwigNew bug/exploit for javaws
2010-02-08Adrien de BeaupreWhen is a 0day not a 0day? Fake OpenSSh exploit, again.
2010-01-24Pedro BuenoOutdated client applications
2010-01-19Johannes UllrichUnpatched Microsoft Windows (all versions) Privilege Escalation Vulnerability Released
2010-01-12Adrien de BeauprePoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability
2009-12-05Guy BruneauJava JRE Buffer and Integer Overflow
2009-11-16G. N. WhiteReports of a successful exploit of the SSL Renegotiation Vulnerability?
2009-11-14Adrien de BeaupreMicrosoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12Rob VandenBrinkWindows 7 / Windows Server 2008 Remote SMB Exploit
2009-10-21Pedro BuenoWordPress Hardening
2009-09-16Bojan ZdrnjaSMB2 remote exploit released
2009-08-31Pedro BuenoMicrosoft IIS 5/6 FTP 0Day released
2009-08-18Bojan ZdrnjaMS09-039 exploit in the wild?
2009-07-16Bojan ZdrnjaOWC exploits used in SQL injection attacks
2009-07-15Bojan ZdrnjaMake sure you update that Java
2009-07-13Adrien de Beaupre* Infocon raised to yellow for Excel Web Components ActiveX vulnerability
2009-07-10Guy BruneauWordPress Fixes Multiple vulnerabilities
2009-07-09Bojan ZdrnjaOpenSSH 0day FUD
2009-06-12Adrien de BeaupreGreen Dam
2009-06-08Chris CarboniKloxo (formerly Lxadmin) Vulnerability Exploited
2009-05-06Tom ListonFollow The Bouncing Malware: Gone With the WINS
2009-04-24Pedro BuenoDid you check your conference goodies?
2009-04-14Swa FrantzenVMware exploits - just how bad is it ?
2009-03-19Mark HofmanBrowsers Tumble at CanSecWest
2009-03-18Adrien de BeaupreAdobe Security Bulletin Adobe Reader and Acrobat
2009-02-25Andre LudwigAdobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-25Andre LudwigPreview/Iphone/Linux pdf issues
2008-08-26John BambenekActive attacks using stolen SSH keys (UPDATED)
2008-05-07Jim ClausingMore on automated exploit generation
2008-05-05John BambenekDefenses Against Automated Patch-Based Exploit Generation
2008-04-24Maarten Van HorenbeeckTargeted attacks using malicious PDF files
2008-04-18John BambenekThe Patch Window is Gone: Automated Patch-Based Exploit Generation
2008-04-10Deborah HaleSymantec Threatcon Level 2
2006-11-20Joel EslerMS06-070 Remote Exploit