ABOUT
CVE DATABASE
CONTACT
VISIT SENTINELONE.COM

Security Research

10 Year Old Vulnerabilities In Avast And AVG Antiviruses Put Millions Of Users At Risk 6
Security Research

Vulnerabilities in Avast And AVG Put Millions At Risk
Kasif Dekel /

Two high-severity flaws in popular end user security tools allow attackers to elevate privileges and compromise devices.

Read More
Inside The Black Box How We Fuzzed Microsoft Defender For IoT And Found Multiple Vulnerabilities 5
Security Research

Inside the Black Box | How We Fuzzed Microsoft Defender for IoT and Found Multiple Vulnerabilities
Kasif Dekel /

A must-read for fuzzing fans, this post gives a detailed look at the advanced techniques used in our recent discovery of multiple bugs in Defender for IoT.

Read More
Pwning Microsoft Azure Defender For IoT Multiple Flaws Allow Remote Code Execution For All 20
Security Research

Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All
Kasif Dekel /

As if IoT & OT aren't hard enough to defend, we dive into five critical vulnerabilities in Microsoft Defender for IoT that leave the door wide open.

Read More
The Art And Science Of MacOS Malware Hunting With Radare2 Leveraging Xrefs YARA Zignatures 11
Security Research

The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures
Phil Stokes /

In the next part of our series on reversing macOS malware, we dig into identifying reused code across malware samples for hunting and detection.

Read More
Another Brick In The Wall Uncovering SMM Vulnerabilities In HP Firmware 1
Security Research

Another Brick in the Wall: Uncovering SMM Vulnerabilities in HP Firmware
Assaf Carlsbad /

How we used Brick to discover six different vulnerabilities affecting HP laptops' firmware

Read More
Zen And The Art Of SMM Bug Hunting 5
Security Research

Zen and the Art of SMM Bug Hunting | Finding, Mitigating and Detecting UEFI Vulnerabilities
Assaf Carlsbad /

In Part 5 of our ongoing series on UEFI security research, we dive into the fascinating world of hunting and exploiting SMM vulnerabilities.

Read More
Firefox JIT Use After Frees Exploiting CVE 2020 26950 6
Security Research

Firefox JIT Use-After-Frees | Exploiting CVE-2020-26950
Max Van Amerongen /

Learn how to dive into JIT compilers in JavaScript engines and follow along as we find a new set of exploit primitives in this previously patched bug.

Read More
CVE 2021 45388 NetUSB RCE Flaw In Millions Of End User Routers
Security Research

CVE-2021-45608 | NetUSB RCE Flaw in Millions of End User Routers
Max Van Amerongen /

SentinelLabs has discovered a high severity flaw in NetUSB which could be remotely exploited to execute code in the kernel.

Read More
Multiple Vulnerabilities Discovered In AWS And Other Major Cloud Services 6
Security Research

USB Over Ethernet | Multiple Vulnerabilities in AWS and Other Major Cloud Services
Kasif Dekel /

25 CVEs and counting: SentinelLabs' latest research reveals millions of cloud users are exposed to privilege escalations from bugs in shared driver software.

Read More
GSOh No Finding Vulnerabilities In VirtualBox Network Offloads 12
Security Research

GSOh No! Hunting for Vulnerabilities in VirtualBox Network Offloads
Max Van Amerongen /

Inspired by Pwn2Own, SentinelLabs' researcher Max Van Amerongen discovered three CVEs, including two privilege escalations, in VirtualBox. Read more here.

Read More
1 2 3 4 … 6