In the 250th episode, we have a follow-up discussion to our "Future of Exploit Development" video from 2020. Memory safety and the impacts of modern mitigations on memory corruption are the main focus.
[binary] A Huawei Hypervisor Vuln and More Memory Safety
[bounty] Remotely Controlling Hyundai and a League of Legends XSS
[binary] Patch Gaps and Apple Neural Engine Vulns
[bounty] Tailscale RCE, an SQLi in PAM360, and Exploiting Backstage
[binary] Hacking Pixel Bootloaders and Injecting Bugs
[bounty] Racing Grafana, Stealing Mastadon Passwords, and Cross-Site Tracing
[binary] Exploiting Undefined Behavior and a Chrome UAF
[bounty] Bypassing Pixel Lock Screens and Checkmk RCE
[binary] OpenSSL Off-by-One, Java XML Bugs, and an In-the-Wild Samsung Chain
[bounty] Apache Batik, Static Site Generators, and an Android App Vuln
[binary] XNU's kalloc_type, Stranger Strings, and a NetBSD Bug
[bounty] A Galaxy Store Bug, Facebook CSRF, and Google IDOR
[binary] Edge Vulns, a SHA-3 Overflow, and an io_uring Exploit
[bounty] XMPP Stanza Smuggling in Jabber and a Cobalt Strike RCE
[binary] Some Browser Exploitation and a Format String Bug?
[bounty] GitHub to GitLab RCE and a new PHP Supply Chain Attack
[binary] i.MX Secure Boot Bypass and a Hancom Office Underflow
[bounty] Got UNIX Sockets and Some Filter Bypasses?
[binary] Pwning Scoreboards, uClibC, and PS5 Exploitation
[bounty] Akamai Cache Poisoning and a Chrome Universal XSS
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast