Marcin Noga

@yo_yo_yo_jbo That was my first idea. But unfortunately AsusCertService.exe contains UAC manifest requiring this exe to be run with admin privilege's. So, trying to spawn this exec as a suspended process and then inject arb code won't work.

Thanks, @GamersNexus, for presenting the bugs I found in ASUS Armoury Crate to a wider audience in such an accessible way! youtube.com/watch?v=Vy_KWP04…

I guess so, that's why I mentioned the timeline in the blog post . On pasted screenshots I only mention about mem leak primitive, but in general I wanted to signal that after 24H2 the exploit won't work.

I have recently "built" for myself that thing : GMK87 + Brown Gaterons 3 Pro + Cherry profile PBT Dragon Ball keycaps

My Deep Dive about vuln discover & exploitation of ZTE MF971R. Paper : talosintelligence.com/resour… Video : youtube.com/watch?v=CfioUxvS… Enjoy ;)

Combination of CVE-2021-21748 (pre-authentication stack-based buffer overflow) + CVE-2021-21745 (CSRF/Referer check bypass) allows an attacker to trigger arbitrary remote code on the vulnerable device without any authentication!

(1/n) If you have a ZTE MF971R you might want to check whether its updated to the newest version...

First Chrome vuln to the pocket 😊More details in the near future ;)

The SWAG is here!!! Thank you @msftsecresponse

First Safari CVE to the pocket ;) CVE-2020-9951 WebKit/Safari UAF via Race Condition support.apple.com/en-us/HT21… A bit more details later.