{"id":50676,"date":"2023-10-28T00:48:14","date_gmt":"2023-10-27T21:48:14","guid":{"rendered":"https:\/\/onhexgroup.ir\/?p=4887"},"modified":"2023-10-31T09:00:23","modified_gmt":"2023-10-31T05:30:23","slug":"%d9%86%da%af%d8%a7%d9%87%db%8c-%d8%a8%d9%87-%d9%85%d8%b3%d8%a7%d8%a8%d9%82%d8%a7%d8%aa-pwn2own-toronto-2023","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/%d9%86%da%af%d8%a7%d9%87%db%8c-%d8%a8%d9%87-%d9%85%d8%b3%d8%a7%d8%a8%d9%82%d8%a7%d8%aa-pwn2own-toronto-2023\/","title":{"rendered":"\u0646\u06af\u0627\u0647\u06cc \u0628\u0647 \u0645\u0633\u0627\u0628\u0642\u0627\u062a Pwn2Own Toronto 2023"},"content":{"rendered":"

\u0632\u0645\u0627\u0646 \u0645\u0637\u0627\u0644\u0639\u0647: <\/span> 10<\/span> \u062f\u0642\u06cc\u0642\u0647<\/span><\/span><\/p>\n

\u0645\u0633\u0627\u0628\u0642\u0627\u062a Pwn2Own Toronto 2023 \u0637\u06cc 4 \u0631\u0648\u0632\u060c 24 \u062a\u0627 27 \u0627\u06a9\u062a\u0628\u0631 \u060c \u0628\u0631\u06af\u0632\u0627\u0631 \u0634\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a Team Viettel \u0628\u0627 \u06a9\u0633\u0628 180 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 30 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0645\u0642\u0627\u0645 \u0627\u0648\u0644 \u0631\u0648 \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f. \u0628\u0631\u0627\u06cc \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0627\u062a\u060c \u0645\u06cc\u062a\u0648\u0646\u06cc\u062f \u0627\u06cc\u0646 \u0644\u06cc\u0646\u06a9 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/p>\n

\"\u0646\u062a\u06cc\u062c\u0647<\/p>\n

\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0627\u062a\u060c \u062f\u0631 \u0645\u062c\u0645\u0648\u0639 1,038,500 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0648 58 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0632\u06cc\u0631\u0648\u062f\u06cc \u0645\u0646\u062d\u0635\u0631 \u0628\u0647 \u0641\u0631\u062f \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0648 \u0628\u0647 \u0633\u0627\u0632\u0646\u062f\u0647 \u0647\u0627 \u06af\u0632\u0627\u0631\u0634 \u062f\u0627\u062f\u0646 \u062a\u0627 \u0646\u0647\u0627\u06cc\u062a\u0627 \u0637\u06cc 90 \u0631\u0648\u0632 \u060c \u0627\u0648\u0646\u0627\u0631\u0648 \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u0646. \u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u062f\u0631 \u0628\u0631\u0631\u0633\u06cc \u0647\u0641\u062a\u06af\u06cc \u060c \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 ZDI \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u0634\u0646\u060c \u0628\u0632\u0648\u062f\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u06a9\u0646\u06cc\u0645. \u0642\u0628\u0644 \u0645\u0633\u0627\u0628\u0642\u0627\u062a \u0647\u0645 \u0627\u063a\u0644\u0628 \u0633\u0627\u0632\u0646\u062f\u0647 \u0647\u0627\u06cc \u0627\u0635\u0644\u0627\u062d\u06cc\u0647 \u0647\u0627\u06cc\u06cc \u0631\u0648 \u0628\u0631\u0627\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634\u0648\u0646 \u0627\u0631\u0627\u0626\u0647 \u062f\u0627\u062f\u0647 \u0628\u0648\u062f\u0646 \u0648 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0627\u062a \u0628\u0627 \u0622\u062e\u0631\u06cc\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u0647\u0627 \u0628\u0631\u06af\u0632\u0627\u0631 \u0634\u062f.<\/p>\n

\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0647 32 \u0634\u0631\u06a9\u062a \u06a9\u0646\u0646\u062f\u0647 \u062d\u0636\u0648\u0631 \u062f\u0627\u0634\u062a\u0646 :<\/p>\n

Peter Geissler
\nBinary Factory
\nPentest Limited
\nTeam Viettel
\nNguyen Quoc Viet
\nSynacktiv
\nTeam Orca of Sea Security
\nTeam ECQ
\nCompass Security
\nBen
\nTeam PHPHooligans
\nSTAR Labs SG
\nInterrupt Labs
\nNCC Group
\nThales
\nR-sec
\nDEVCORE Intern
\nToChim
\nClaroty
\nSTEALIEN
\nRafal Goryl
\nANHTUD
\nSina Kheirkhah
\nChris Anastasio
\nBugscale
\nEason Liu
\nSAFA ex Teamt5
\nVNG Security Response Center
\nSonar
\nSEFCOM T0
\nNettitude
\nFoundry Zero<\/p>\n

\u0647\u0645\u0648\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u0644\u06cc\u0633\u062a \u0634\u0631\u06a9\u062a \u06a9\u0646\u0646\u062f\u06af\u0627\u0646 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u06a9\u0646\u06cc\u062f\u060c \u0622\u0642\u0627\u06cc \u0633\u06cc\u0646\u0627 \u062e\u06cc\u0631\u062e\u0648\u0627\u0647 \u0647\u0645 \u0634\u0631\u06a9\u062a \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u0646 \u06a9\u0647 \u062a\u0648\u0646\u0633\u062a\u0646 \u062f\u0631 \u0645\u062c\u0645\u0648\u0639 35 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 7 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0628\u06cc\u0627\u0631\u0646. \u0627\u06cc\u0634\u0648\u0646 \u062f\u0631 \u0633\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u06cc \u06a9\u0647 \u062f\u0627\u0634\u062a\u0646 \u060c \u062a\u0648\u0646\u0633\u062a\u0646 \u0633\u0647 \u0645\u062d\u0635\u0648\u0644 TP-Link Omada Gigabit Router \u0648 Lexmark CX331adwe \u0648 Synology BC500 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0646.<\/p>\n

\u0646\u0645\u0648\u062f\u0627\u0631 \u0632\u06cc\u0631 \u0646\u0634\u0648\u0646 \u062f\u0647\u0646\u062f\u0647 \u060c \u062a\u0639\u062f\u0627\u062f \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0645\u0648\u0641\u0642 \u0647\u0631 \u0634\u0631\u06a9\u062a \u06a9\u0646\u0646\u062f\u0647 \u0647\u0633\u062a\u0634 :<\/p>\n

\"\u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a<\/p>\n

\u0644\u06cc\u0633\u062a 12 \u0645\u062d\u0635\u0648\u0644\u06cc \u06a9\u0647 \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0647 \u0628\u0647 \u062f\u0633\u062a \u0647\u06a9\u0631\u0647\u0627 \u060c \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0634\u062f\u0646 \u0648 \u0627\u0644\u0627\u0646 \u0645\u06cc\u0634\u0647 \u06af\u0641\u062a \u06a9\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646 :<\/p>\n

Canon imageCLASS MF753Cdw
\nSynology BC500
\nMy Cloud Pro Series PR4100
\nXiaomi 13 Pro
\nSonos Era 100
\nQNAP TS-464
\nSamsung Galaxy S23
\nLexmark CX331adwe
\nTP-Link Omada Gigabit Router
\nWyze Cam v3
\nHP Color LaserJet Pro MFP 4301fdw
\nSynology RT6600ax<\/p>\n

\u0646\u0645\u0648\u062f\u0627\u0631 \u0632\u06cc\u0631 \u062a\u0639\u062f\u0627\u062f \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0634\u062f\u0646 \u0647\u0631 \u0645\u062d\u0635\u0648\u0644 \u0631\u0648 \u0646\u0634\u0648\u0646 \u0645\u06cc\u062f\u0647 :<\/p>\n

\"\u062a\u0639\u062f\u0627\u062f<\/p>\n

\u062f\u0631 \u0645\u062c\u0645\u0648\u0639 57 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0646\u062a\u06cc\u062c\u0647 29 \u0645\u0648\u0631\u062f\u0634 \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0645\u06cc\u0632\u060c 15 \u0645\u0648\u0631\u062f\u0634 \u0645\u0648\u0641\u0642 \u0627\u0645\u0627 \u0628\u0627\u06af\u0647\u0627 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u0646\u060c 7 \u0645\u0648\u0631\u062f\u0634 \u0634\u06a9\u0633\u062a \u062e\u0648\u0631\u062f\u0647 \u0648 \u062f\u0631 6 \u0645\u0648\u0631\u062f \u0647\u0645 \u0634\u0631\u06a9\u062a \u06a9\u0646\u0646\u062f\u0647 \u0627\u0646\u0635\u0631\u0627\u0641 \u062f\u0627\u062f\u0647 :<\/p>\n

\"\u0646\u062a\u0627\u06cc\u062c<\/p>\n

\u062f\u0631 \u0628\u0631\u062e\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627 \u0647\u06a9\u0631\u0647\u0627 \u062f\u0648 \u0645\u062d\u0635\u0648\u0644 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0631\u062f\u0646 \u06a9\u0647 \u0628\u0647\u0634\u0648\u0646 SOHO Smashup \u0645\u06cc\u06af\u0646.<\/p>\n

\u0631\u0648\u0632 \u0627\u0648\u0644 \u0645\u0633\u0627\u0628\u0642\u0647 :<\/strong><\/p>\n

\u0631\u0648\u0632 \u0627\u0648\u0644 \u0645\u0633\u0627\u0628\u0642\u0647 \u060c \u0628\u0627 Peter Geissler \u0634\u0631\u0648\u0639 \u0634\u062f\u060c \u0627\u06cc\u0634\u0648\u0646 \u0642\u0631\u0627\u0631 \u0628\u0648\u062f \u06a9\u0647 Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0646\u062a\u0648\u0646\u0633\u062a \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u062f\u0631 \u0641\u0631\u0635\u062a \u06a9\u0647 \u062f\u0627\u062f\u0647 \u0628\u0648\u062f\u0646\u060c \u062a\u0645\u0648\u0645 \u06a9\u0646\u0647 \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 FAILURE \u0634\u062f.<\/p>\n

Binary Factory \u062a\u0648\u0646\u0633\u062a \u0628\u0627 stack buffer overflow \u060c \u0645\u062d\u0635\u0648\u0644 Synology BC500 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 30 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

Pentest Limited \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u062f\u0648 \u0628\u0627\u06af DoS \u0648 SSRF \u060c \u062a\u0648\u0646\u0633\u062a\u0646 My Cloud Pro Series PR4100 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647. 40 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 4 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f\u0646.<\/p>\n

\"Pentest<\/p>\n

Team Viettel \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u0647 \u0628\u0627\u06af\u060c Xiaomi 13 Pro \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0648 40 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 4 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

Nguyen Quoc Viet \u062a\u0648\u0646\u0633\u062a\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc buffer overflow \u0645\u062d\u0635\u0648\u0644 Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647. 20 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

Synacktiv\u060c \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u0633\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u06cc Synology BC500 \u060c \u062a\u0648\u0646\u0633\u062a \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc \u06a9\u0646\u0647 \u0648 15 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"Synacktiv\"<\/p>\n

Team Orca of Sea Security \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u062f\u0648 \u0628\u0627\u06af OOB Read \u0648 UAF \u062a\u0648\u0646\u0633\u062a\u0646 Sonos Era 100 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 60 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 6 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f.<\/p>\n

Team ECQ \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u0633\u0647 \u0628\u0627\u06af \u06a9\u0647 \u06cc\u06a9\u06cc\u0634 SSRF\u00a0 \u0648 \u062f\u0648\u062a\u0627\u0634 injection \u0628\u0648\u062f\u060c \u062a\u0648\u0646\u0633\u062a\u0646 QNAP TS-464 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647. 40 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 4 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"Team<\/p>\n

Compass Security \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack overflow \u060c \u0645\u062d\u0635\u0648\u0644 Synology BC500 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u06cc \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 3,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f\u0646.<\/p>\n

Ben \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack overflow \u060c \u0645\u062d\u0635\u0648\u0644 Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 10 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"Ben\"<\/p>\n

Pentest Limited \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Improper Input Validation \u060c \u0633\u0627\u0645\u0633\u0648\u0646\u06af Galaxy S23 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647. 50 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"Pentest<\/p>\n

Team Viettel \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0646\u0633\u062a QNAP TS-464 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 20 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 4 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"Team<\/p>\n

Team PHPHooligans \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc memory corruption \u062a\u0648\u0646\u0633\u062a\u0646 \u0631\u0648\u06cc Lexmark CX331adwe \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0647 \u0648 20 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

STAR Labs SG \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc directory traversal \u0648 command injection \u060c \u062a\u0648\u0646\u0633\u062a QNAP TS-464 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 20 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 4 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f.<\/p>\n

\"STAR<\/p>\n

Interrupt Labs \u0646\u062a\u0648\u0646\u0633\u062a \u062f\u0631 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647\u0634 \u0627\u062e\u062a\u0635\u0627\u0635 \u062f\u0627\u062f\u0647 \u0628\u0648\u062f\u0646\u060c Lexmark CX331adwe \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 FAILURE \u0634\u062f\u0646.<\/p>\n

NCC Group \u062a\u0648\u0646\u0633\u062a\u0646 Xiaomi 13 Pro \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 20 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 4 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"NCC<\/p>\n

Team Viettel \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack buffer overflow \u062a\u0648\u0646\u0633\u062a Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 10 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

STAR Labs SG \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc permissive list of allowed inputs \u062a\u0648\u0646\u0633\u062a Samsung Galaxy S23 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 25 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"STAR<\/p>\n

Thales \u062a\u0648\u0646\u0633\u062a\u0647 QNAP TS-464 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 12,500 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2.5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

R-sec \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack buffer overflow \u062a\u0648\u0646\u0633\u062a Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 2,500 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646.<\/p>\n

\u0631\u0648\u0632 \u062f\u0648\u0645 \u0645\u0633\u0627\u0628\u0642\u0647 :<\/h2>\n

Team Viettel \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc OOB \u062a\u0648\u0646\u0633\u062a Sonos Era 100 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 30 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 6 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"Team<\/p>\n

Chris Anastasio \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a TP-Link Omada Gigabit Router \u0648 Lexmark CX331adwe \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 100 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 10 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"Chris<\/p>\n

Bugscale \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack buffer overflow \u0631\u0648 \u0631\u0648\u06cc Synology BC500 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u060c \u0627\u0645\u0627 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u06cc \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 3,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"Bugscale<\/p>\n

DEVCORE Intern \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a stack overflow \u0631\u0648\u06cc TP-Link Omada Gigabit Router \u0648 \u062f\u0648 \u062a\u0627 \u0628\u0627\u06af \u0631\u0648\u06cc QNAP TS-464 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 50 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 10 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0631\u0648 \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

Team Viettel \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a stack overflow \u0631\u0648\u06cc HP Color LaserJet Pro MFP 4301fdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 20 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"Team<\/p>\n

Peter Geissler \u0627\u0632 \u0647\u06a9 Wyze Cam v3 \u0648 QNAP TS-464 \u060c \u0647\u0645\u0686\u0646\u06cc\u0646 Eason Liu \u0627\u0632 \u0647\u06a9 Xiaomi 13 Pro \u060c \u0648 Chris Anastasio \u0627\u0632 \u0647\u06a9 Lexmark CX331adwe \u0627\u0646\u0635\u0631\u0627\u0641 \u062f\u0627\u062f\u0646.<\/p>\n

Interrupt Labs \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack buffer overflow \u0631\u0648 \u0631\u0648\u06cc Canon imageCLASS MF753Cdw \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 2,500 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f\u0646.<\/p>\n

SAFA ex Teamt5 \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack buffer overflow \u0631\u0648 \u0631\u0648\u06cc Synology BC500 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 3,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f\u0646.<\/p>\n

\"BUG<\/p>\n

Team Orca of Sea Security \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u06cc\u0647 \u0628\u0627\u06af Synology RT6600ax \u0648 \u0628\u0627 \u0633\u0647 \u0628\u0627\u06af QNAP TS-464 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 50 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 50 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"Team<\/p>\n

VNG Security Response Center \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u062f\u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648 \u062f\u0631 QNAP TS-464 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 5,000 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 1 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646.<\/p>\n

\"VNG<\/p>\n

Sina Kheirkhah \u062a\u0648\u0646\u0633\u062a \u06cc\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc RCE \u0631\u0648 \u0631\u0648\u06cc Synology BC500 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u06cc \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 3,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"Sina<\/p>\n

Sonar \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 command injection \u0631\u0648 \u0631\u0648\u06cc Wyze Cam v3 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 30 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"sonar\"<\/p>\n

SEFCOM T0 \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 command injection \u0631\u0648 \u0631\u0648\u06cc Wyze Cam v3 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f \u060c 3,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"SEFCOM<\/p>\n

Interrupt Labs \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc improper input validation \u0631\u0648 \u0631\u0648\u06cc Samsung Galaxy S23 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 25 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646.<\/p>\n

\"Interrupt<\/p>\n

Nettitude \u0646\u062a\u0648\u0646\u0633\u062a \u062f\u0631 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u062f\u0627\u0634\u062a\u060c Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647.<\/p>\n

ToChim \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc permissive list of allowed inputs \u0631\u0648 \u0631\u0648\u06cc Samsung Galaxy S23 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 25 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 5 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"ToChim<\/p>\n

ANHTUD \u062a\u0648\u0646\u0633\u062a \u06cc\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc stack buffer overflow \u0631\u0648 \u0631\u0648\u06cc Canon imageCLASS MF753Cdw \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0648 10\u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

\"ANHTUD<\/p>\n

\u0631\u0648\u0632 \u0633\u0648\u0645 \u0645\u0633\u0627\u0628\u0642\u0627\u062a :<\/h2>\n

DEVCORE \u0646\u062a\u0648\u0646\u0633\u062a \u062f\u0631 \u0641\u0631\u0635\u062a\u06cc \u06a9\u0647 \u062f\u0627\u0634\u062a\u0647 \u060c Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647.<\/p>\n

Interrupt Labs \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 RCE \u0631\u0648\u06cc Synology BC500 \u0627\u0646\u062c\u0627\u0645 \u0628\u062f\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u0634\u0648\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 3,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 0.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0631\u0648 \u06a9\u0633\u0628 \u06a9\u0631\u062f.<\/p>\n

Team Orca of Sea Security \u0646\u062a\u0648\u0646\u0633\u062a \u062f\u0631 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u062f\u0627\u0634\u062a\u0647\u060c Xiamoi 13 Pro \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647.<\/p>\n

ToChim \u0627\u0632 \u0647\u06a9 Xiaomi 13 Pro \u0648 ANHTUD\u00a0 \u0647\u0645 \u0627\u0632 \u0647\u06a9 Xiaomi 13 Pro \u0627\u0646\u0635\u0631\u0627\u0641 \u062f\u0627\u062f.<\/p>\n

Claroty \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a 4 \u0628\u0627\u06af \u0631\u0648 \u0631\u0648\u06cc TP-Link Omada Gigabit Router \u0648 Synology BC500 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u0627\u0645\u0627 \u0686\u0648\u0646 \u0628\u0627\u06af\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0631\u062f\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 40,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 8.25 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646.<\/p>\n

\"Claroty<\/p>\n

STEALIEN \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 stack buffer overflow \u0631\u0648 \u0631\u0648\u06cc Wyze Cam v3 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 root shell \u0634\u062f\u0647. 15 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647.<\/p>\n

\"STEALIEN<\/p>\n

Rafal Goryl \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 2 \u0628\u0627\u06af\u060c \u062a\u0648\u0646\u0633\u062a\u0647 Wyze Cam v3 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 root shell \u0634\u062f\u0647. 15 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647.<\/p>\n

\"Rafal<\/p>\n

Team Orca of Sea Security \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a Samsung Galaxy S23 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0628\u0627\u06af\u06cc \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646 \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 6,250 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 1.25 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647.<\/p>\n

\"Team<\/p>\n

Team Viettel \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 stack buffer overflow \u0631\u0648 \u0631\u0648\u06cc Lexmark CX331adwe \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 RCE \u0634\u062f\u0647. 10 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 2 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0647.<\/p>\n

Interrupt Labs \u062f\u0631 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u062f\u0627\u0634\u062a\u060c \u0646\u062a\u0648\u0646\u0633\u062a Xiaomi 13 Pro \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647.<\/p>\n

Synacktiv \u062a\u0648\u0646\u0633\u062a \u06cc\u0647 heap buffer overflow \u0631\u0648 \u062f\u0631 \u06a9\u0631\u0646\u0644 \u0627\u0632 \u0637\u0631\u06cc\u0642 WiFi \u0631\u0648\u06cc Wyze Cam v3 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647 \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 RCE \u0645\u06cc\u0634\u0647. 15 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f\u0647.<\/p>\n

\"Synacktiv\"<\/p>\n

Sina Kheirkhah \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u06cc\u0647 stack buffer overflow \u0648 \u06cc\u0647 missing authentication for critical function \u0631\u0648 \u0631\u0648\u06cc TP-Link Omada Gigabit Router \u0648 Lexmark CX331adwe \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0628\u0627\u06af\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u060c \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 31,250 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 6.25 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f.<\/p>\n

\"Sina<\/p>\n

\u0631\u0648\u0632 \u0686\u0647\u0627\u0631\u0645 \u0648 \u0646\u0647\u0627\u06cc\u06cc \u0645\u0633\u0627\u0628\u0642\u0627\u062a :<\/h2>\n

Foundry Zero \u0646\u062a\u0648\u0646\u0633\u062a \u062f\u0631 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0641\u0631\u0635\u062a \u062f\u0627\u0634\u062a\u060c Lexmark CX331adwe \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647.<\/p>\n

ANHTUD \u062a\u0648\u0646\u0633\u062a \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0648 \u0628\u0627\u06af stack buffer overflows \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a TP-Link Omada Gigabit Router \u0648 Canon imageCLASS MF753Cdw \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0628\u0627\u06af\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0631\u062f\u0646\u060c \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u0646\u060c 31,250 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 6.25 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u06a9\u0633\u0628 \u06a9\u0631\u062f\u0646.<\/p>\n

Interrupt Labs \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc UAF \u0648 integer underflow \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a Sonos Era 100 \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647\u060c \u0627\u0645\u0627 \u0686\u0648\u0646 \u0628\u0627\u06af\u06cc \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u0646\u060c \u0642\u0628\u0644\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c 18,750 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 3.75 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646.<\/p>\n

\"Interrupt<\/p>\n

Team Viettel \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc heap buffer overflow \u0648 stack buffer overflow \u060c \u062a\u0648\u0646\u0633\u062a TP-Link Omada Gigabit Router \u0648 Canon imageCLASS MF753Cdw \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u06a9\u0646\u0647. 50 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 10 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646.<\/p>\n

\"Team<\/p>\n","protected":false},"excerpt":{"rendered":"

\u0632\u0645\u0627\u0646 \u0645\u0637\u0627\u0644\u0639\u0647: 10 \u062f\u0642\u06cc\u0642\u0647 \u0645\u0633\u0627\u0628\u0642\u0627\u062a Pwn2Own Toronto 2023 \u0637\u06cc 4 \u0631\u0648\u0632\u060c 24 \u062a\u0627 27 \u0627\u06a9\u062a\u0628\u0631 \u060c \u0628\u0631\u06af\u0632\u0627\u0631 \u0634\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a Team Viettel \u0628\u0627 \u06a9\u0633\u0628 180 \u0647\u0632\u0627\u0631 \u062f\u0644\u0627\u0631 \u062c\u0627\u06cc\u0632\u0647 \u0646\u0642\u062f\u06cc \u0648 30 \u0627\u0645\u062a\u06cc\u0627\u0632 Master of Pwn \u0645\u0642\u0627\u0645 \u0627\u0648\u0644 \u0631\u0648 \u0628\u062f\u0633\u062a \u0622\u0648\u0631\u062f. \u0628\u0631\u0627\u06cc \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0627\u062a\u060c \u0645\u06cc\u062a\u0648\u0646\u06cc\u062f \u0627\u06cc\u0646 \u0644\u06cc\u0646\u06a9 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u06cc\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0633\u0627\u0628\u0642\u0627\u062a\u060c \u062f\u0631 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26,28,29,34],"tags":[],"class_list":["post-50676","post","type-post","status-publish","format-standard","hentry","category-vulnerability","category-28","category-29","category-server"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/50676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=50676"}],"version-history":[{"count":2,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/50676\/revisions"}],"predecessor-version":[{"id":50769,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/50676\/revisions\/50769"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=50676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=50676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=50676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}