Ongoing testing and experimentation in offensive security are critical catalysts for detecting unknown vulnerabilities that empower us to beat attackers at their own game. Likewise, building upon security research detailing known CVE’s adds deeper layers of analysis demonstrating how hackers exploit specific vulnerabilities in the wild if left unpatched on the attack surface.

In the third episode of our What the Vuln series, we share a round-up of Q2 vulnerabilities that we came up against along with the cutting-edge techniques we developed to exploit them.

Join us to hear about:

• Discovery of unquoted search path vulnerabilities in Microsoft operating system environments, including CVE-2023-21541, enabling attackers to gain horizontal or vertical privilege escalation.
• A deep dive into Fortinet CVE-2022-42475 highlighting new research on how to develop an exploit that targets a single FortiGate appliance running a specific version of FortiOS.