Ever wondered what happens when you pickle a mailbox? 🥒📬
(No, it’s not a recipe, it’s a vulnerability.)
Our team breaks down CVE-2025-20393 in a new deep dive post covering root cause, internals & exploitation details
https://t.co/VLx4amr7J9
Written by @CurseRed & @bestswngs
🖨️ Brother, can you spare us a root shell?
We were ready for Pwn2Own but they patched it on the LAST DAY of registration 😭
Hope you enjoy this new blog post from us.
📖 https://t.co/TpVeBDHDWj
📢 Confirmed! dmdung (@_piers2) used a single OOB access bug to exploit the @Sonos Era 300 smart speaker. In doing so, he earns $50,000 and 5 Master of Pwn points. #Pwn2Own
Confirmed! @starlabs_sg used a heap based buffer overflow to exploit the @CanonUSA imageCLASS MF654Cdw. They earn themselves $20,000 and 2 Master of Pwn points. #Pwn2Own#P2OIreland
Recently our co-worker, @CurseRed found and reported some bugs in OnlyOffice while on a pentest engagement.
We are always preparing organisations to protect against the ever-evolving threat of cyber attacks.
Lost in Translation: Apache Vulnerabilities That Don’t Count (Literally)
Found a few bugs in Apache projects in 2024 - SSRF in Pony Mail Foal & RCE on whimsy\.apache\.org
Fixed but no CVEs
Sharing is Caring: https://t.co/XHfDoAKbZC
Found by @CurseRed & former intern Devesh.
I hope everyone got some rest after @DownUnderCTF this weekend. My colleague @hash_kitten wrote up a blog post on a novel technique for SQL Injection in PDO's prepared statements, required to exploit the “legendary” challenge, which only got one solve: https://t.co/ep3oa9898x
CASE CLOSED: CVE-2025-29824
0 public samples, 0 information
Suspect: Windows CLFS driver
Crime: UAF leading to Privilege Escalation
Status: ACTIVELY EXPLOITED ITW
Investigation: Debugged and documented
Case files: https://t.co/Ig6RbvhLmZ
Done by our intern, Ong How Chong
One of our current intern, @goatmilkkk shared his Chrome-atic escape adventure using CVE-2024-30088
Epic obstacles documented in it too!
https://t.co/pZH3WgQG91
🎉 Last weekend we participated in bi0sCTF 2025 as r3kapig and secured first place! 🥇 Huge thanks to @teambi0s for organizing such an amazing competition! 🙏 Congratulations to @ProjectSEKAIctf for second place 🥈 and @thehackerscrew1 for third place 🥉
When life gives you tangerines🍊
Intern Lin Ze Wei's task: Port a 2-bug exploit to Pixel 6 Pro
Problem: One bug "doesn't work"
Solution: Make it work with 1 bug
Sometimes the best research comes from working with what you think you have
https://t.co/bPqxoxaAGz
After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_
CVE-2025-23095 to CVE-2025-23107
📍 https://t.co/Fk4mE0HVeY
"Why is my exploit taking 10 minutes?"
*checks logs*
*sees 10,000 kernel warnings*
"...oh" 💡
Fresh Friday night read: our intern, Tan Ze Jian, on Mali exploitation - sometimes the fix is simpler than you think!
https://t.co/kIe2DTgFOU
Confirmed!! Dung and Nguyen (@MochiNishimiya) of STARLabs used a TOCTOU race condition to escape the VM and an Improper Validation of Array Index for the Windows privilege escalation. They earn $70,000 and 9 Master of Pwn points. #Pwn2Own
Outstanding! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a first in #Pwn2Own history. He earns $150,000 and 15 Master of Pwn points. #P2OBerlin
Nicely done! Billy (@st424204) and Ramdhan (@n0psledbyte) of STAR Labs used a UAF to perform their Docker Desktop escape and execute code on the underlying OS. They earn $60,000 and 6 Master of Pwn Points.
Confirmed! Chen Le Qi (@cplearns2h4ck) of STARLabs SG combined a UAF and an integer overflow to escalate to SYSTEM on #Windows 11. He earns $30,000 and 3 Master of Pwn points. #Pwn2Own#P2OBerlin