Overview Malformed ZIP headers can cause antivirus and endpoint detection and response software (EDR) to produce false negatives. Despite the presence of malformed headers, some extraction software is still able to decompress...
Read MorePlease join us virtually as we celebrate the following eight 2025 additions to the NIST Gallery of Distinguished Alumni for their career contributions to the work of NBS/NIST: Robert E. Drullinger Richard H.F. Jackson Gregory J....
Read More
Xavier’s diary entry “Abusing DLLs EntryPoint for the Fun” inspired me to do...
Read More
Since the end of the year is quickly approaching, it is undoubtedly a good time to look back at...
Read MoreI have already talked about various React2Shell exploit attempts we have observed in the last weeks. But new varieties of the exploit are popping up, and the most recent one is using this particular version of the exploit: POST...
Read MoreOverview A newly identified vulnerability in some UEFI-supported motherboard models leaves systems vulnerable to early-boot DMA attacks across architectures that implement UEFI and IOMMU. Although the firmware indicates that DMA...
Read MoreOverview Vulnerabilities have been identified in Siemens Gridscale X Prepay that allows unauthenticated username enumeration and enables an attacker to bypass account lock functionality. These issues may permit unauthorized...
Read MoreExploits for React2Shell (CVE-2025-55182) remain active. However, at this point, I would think that any servers vulnerable to the “plain” exploit attempts have already been exploited several times. Here is...
Read MoreWireshark release 4.6.2 fixes 2 vulnerabilities and 5 bugs. The Windows installers now ship with the Visual C++ Redistributable version 14.44.35112. This required a reboot of my laptop. Didier Stevens Senior handler...
Read More
Introduction Since as early as November 2025, the finger protocol has been used in ClickFix social...
Read More
In the Microsoft Windows ecosystem, DLLs (Dynamic Load Libraries) are PE files like regular...
Read More
Several months ago, I got a Nucbox K8 Plus minicomputer to use as a Proxmox 9 server. At the time...
Read More