Pinned post
I wrote "Reverse Engineering the Win32k Type Isolation Mitigation", about how Windows 10 1709 changed the way SURFACE objects are allocated to kill Bitmap-based kernel exploitation techniques: blog.quarkslab.com/reverse-engine…
Francisco Falcon
@fdfalcon
Vulnerability researcher at ??
567 Following 3.7K Followers 3.1K Posts
Latest posts 5
A rogue DHCP server can inject arbitrary dhclient.conf directives via malicious DHCP options and get RCE as root in systems running dhclient:
freebsd.org/security/advis…
freebsd.org/security/advis…
Wow, remote OS command injection (from the same network segment) in FreeBSD IPv6 stack via router advertisement packets: freebsd.org/security/advis…
rtsold passes the unescaped domain search list option from the RA packet to the resolvconf shell script.
rtsold passes the unescaped domain search list option from the RA packet to the resolvconf shell script.
