udunadan

Zero Day Initiative — CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability (www.zerodayinitiative.com)

TheHole New World - how a small leak will sink a great browser (CVE-2021-38003) (starlabs.sg)

[Chrome] Heap-use-after-free in ExclusiveAccessBubbleViews::UpdateBounds (reward: $10000) (crbug.com)

V8 Sandbox - Code Pointer Sandboxing (docs.google.com)

TALOS-2023-1757 Foxit Reader Field OnBlur event use-after-free vulnerability (talosintelligence.com)

CVE-2023-28754 Apache ShardingSphere RCE (SnakeYAML Deserialization) (www.openwall.com)

[Chrome] oob write in vrend_renderer_transfer_write_iov (reward: $15000) (bugs.chromium.org)

[Chrome] Race Condition UAF in amdtee_open_session (reward: $10000) (bugs.chromium.org)

Anatomy of Lockdown Mode (blacktop.github.io)

CVE-2023-2033: Chrome [0-day] JIT optimisation issue (bugs.chromium.org)

CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent (blog.qualys.com)

Microsoft Edge MSDCPDF Javascript addIcon type confusion vulnerability (www.talosintelligence.com)