Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
veganism.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Veganism Social is a welcoming space on the internet for vegans to connect and engage with the broader decentralized social media community.

Administered by:

Server stats:

184
active users

veganism.social: AboutStatusPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#Pwn2own

0 posts0 participants0 posts today
Public
Tom Schuster

We just published my blog post about the recent work on hardening the #Firefox frontend against attacks we have seen demonstrated during #Pwn2Own.

attackanddefense.dev/2025/04/0

Attack & Defense · Hardening the Firefox Frontend with Content Security PoliciesMost of the Firefox User Interface (UI), including the address bar and the tab strip, are implemented using standard web technologies like HTML, CSS and JavaScript plus some additional custom components like XUL. One of the advantages of using web technologies for the front end is that it allows rendering the frontend using the browser engine on all desktop operating systems. However, just like many web applications are susceptible to some form of injection attack (OWASP Top Ten), Firefox’s use of web technologies for the frontend makes it no exception and hence it is vulnerable to injection attacks as well.
Public
nemo™ 🇺🇦

At the recent Pwn2Own Ireland 2024 event, researchers exposed vulnerabilities in TrueNAS devices, highlighting the need for enhanced security measures. With teams earning over $1 million by exploiting these flaws, TrueNAS is urging users to harden their systems. 🛡️💻 Stay informed and secure! #Cybersecurity #TrueNAS #Pwn2Own #Vulnerabilities #DataProtection #newz Read more: techradar.com/pro/TrueNAS-devi

TechRadar pro · TrueNAS device vulnerabilities exposed during hacking competitionBy Efosa Udinmwen
Public *
Sector 7

We have published the 2nd writeup about the EV vulnerabilities we exploited for #Pwn2Own Automotive: the JuiceBox 40.

Despite what the @thezdi advisories say, these bugs were NOT fixed by the vendor! SiLabs has declared the product EOL and won't fix it.

sector7.computest.nl/post/2024

Sector 7 · Pwn2Own Automotive 2024: Hacking the JuiceBox 40During Pwn2Own Automotive 2024 in Tokyo, we demonstrated exploits against three different EV chargers: the Autel MaxiCharger (MAXI US AC W12-L-4G), the ChargePoint Home Flex and the JuiceBox 40 Smart EV Charging Station with WiFi. This is our writeup of the research that we performed on the JuiceBox 40 Smart EV Charging Station. We discovered one vulnerability which has, since the event, been assigned CVE-2024-23938. During the competition, we were able to exploit CVE-2024-23938 to execute arbitrary code on the charger while requiring only network access for practical reasons at the event. However, being within Bluetooth range of the device is sufficient with a few extra steps.
VegansExploreLive feeds
About