Research

Research by Securify

SFY20090602 - PulseAudio local race condition privilege escalation vulnerability

https://securify.nl/advisory/SFY20090602/pulseaudio-local-race-privilege-escalation-vulnerability.html

SFY20091001 - Outlook PR_ATTACH_METHOD file execution vulnerability

https://securify.nl/advisory/SFY20091001/outlook-pr-attach-method-file-execution-vulnerability.html

SFY20110801 - .NET Framework EncoderParameter integer overflow vulnerability

https://securify.nl/advisory/SFY20110801/_net-framework-encoderparameter-integer-overflow-vulnerability.html

https://securify.nl/en/blog/SFY20150401/tales-from-the-crypt_-exploiting-the-_net-encoderparameter-integer-overflow-vulnerability.html

SFY20150601 - Cisco AnyConnect elevation of privileges via DLL side loading

https://securify.nl/en/advisory/SFY20150601/cisco-anyconnect-elevation-of-privileges-via-dll-side-loading.html

SFY20150701 - Cisco AnyConnect elevation of privileges via DMG install script

https://securify.nl/en/advisory/SFY20150701/cisco-anyconnect-elevation-of-privileges-via-dmg-install-script.html

SFY20150901 - HP Color LaserJet CM2320 MFP Series multiple DLL side loading vulnerabilities

https://securify.nl/en/advisory/SFY20150901/leadtools-activex-control-multiple-dll-side-loading-vulnerabilities.html

https://securify.nl/en/advisory/SFY20150902/hp-tocommsg-dll-side-loading-vulnerability.html

https://securify.nl/en/advisory/SFY20150903/hp-laserjet-fax-preview-dll-side-loading-vulnerability.html

SFY20151201 - DLL side loading vulnerability in VMware Host Guest Client Redirector

https://securify.nl/en/advisory/SFY20151201/dll-side-loading-vulnerability-in-vmware-host-guest-client-redirector.html

SFY20151202 - Office OLE multiple DLL side loading vulnerabilities

https://securify.nl/en/blog/SFY20151201/there_s-a-party-in-ole_-and-you-are-invited.html

SFY20160301 - Internet Explorer iframe sandbox local file name disclosure vulnerability

https://securify.nl/en/advisory/SFY20160301/internet-explorer-iframe-sandbox-local-file-name-disclosure-vulnerability.html

SFY20161115 - Pwning WordPress with Cross-Site Scripting

https://securify.nl/en/blog/SFY20161115/pwning-wordpress-with-cross-site-scripting.html

SFY20170201 - SyntaxHighlight MediaWiki extension allows injection of arbitrary Pygments options

https://www.securify.nl/en/advisory/SFY20170201/syntaxhighlight-mediawiki-extension-allows-injection-of-arbitrary-pygments-options.html