/explore
|
You are here 
|
googleprojectzero.blogspot.com | ||
| | | | |
comsecuris.com
[AI summary] This blog post discusses a detailed exploit chain targeting a mobile phone's application processor OS through a compromised modem. The author outlines the process of identifying vulnerabilities in the baseband firmware, reverse engineering the MT6795's cellular stack layers, and attempting to fuzz the MM layer for potential memory corruption issues. The post also touches on the challenges of creating a persistent rootkit via the modem and the importance of hardware isolation in securing mobile platforms. |
|
| | | | | ||
| | | | |
blog.quarkslab.com
Following our presentation at Black Hat USA, in this blog post we provide some details on CVE-2022-20233, the latest vulnerability we found on Titan M, and how we exploited it to obtain code execution on the chip. |
|
| | | | | ||
| | | | |
www.riscure.com
In this series of blog posts about Samsung's TEE OS we identify vulnerabilities in tee security and show how to exploit them. |
|
| | | | | ||
| | | | |
www.zerodayinitiative.com
[AI summary] A critical remote code execution vulnerability in SolarWinds Access Rights Manager allows attackers to execute arbitrary code with service account privileges if proper data validation is not enforced. |
|
| | | |||
