Synacktiv successfully executed a TOCTOU attack against Tesla – Gateway and earned ten Master of Pwn points, a Tesla Model 3, and $100,000.
Qrious Security’s Bien Pham successfully exploited Oracle VirtualBox using an OOB Read with a stacked-based buffer overflow and earned $40,000 with 4 Master of Pwn points. However, this was a known exploit for which they earned $15,000 and 1.5 points.
Team STAR Labs also successfully executed an attack against Ubuntu Desktop. STAR Labs successfully executed a 2-bug chain targeting Microsoft SharePoint and earned $100,000 with ten Master of Pwn points. For this attempt, Hariri warned $50,000 and five Master of Pwn points. On day 1, Haboon SA’s AbdulAziz Hariri used a 6-bug logic chain to attack Adobe Reader and successfully exploited multiple failed patches that evaded the sandbox and bypassed a banned API list. Here are the highlights of vulnerabilities disclosed each day. They took home $530,000, a $25,000 bonus, Platinum status in 2024 Pwn2Own, and a Tesla Model 3. Team Synacktiv won the most points (53 points) and was declared the Masters of Pwn. This time, participants were awarded a full bounty (more than $1,000,000) in every round for successful exploits.ĭuring the three-day event, contestants revealed 27 unique zero days and won $1,035,000 cumulatively and a Tesla. At this year’s Pwn2Own 2023 held in Vancouver between 22 and 24 March 2023, around 19 entries were part of the event, aiming to target nine different platforms, including Tesla cars. Pwn2Own, as we know it, is an annual computer hacking contest that offers various advantages to the cybersecurity industry. At Pwn2Own 2023, participants were awarded a full bounty (more than $1,000,000) in each round for successful exploits.
0 kommentar(er)
