Technical Advisory

Through sharp, technical and insightful analysis, the Payatu Team is constantly on the lookout for vulnerabilities and threats. This section exhibits a few of our findings.

Zeroday Reports

Report ID	Title	Reporeted On	Publish On	CVE-ID
PS1	Safari video permission spoof	05-Aug-2019	25-Mar-2020	CVE-2020-9781
PS2	massCode Code execution	01-Feb-2020	04-Feb-2020	CVE-2020-8548
PS3	Safari Address Bar Spoof	11-Oct-2019	29-Jan-2020	CVE-2020-3833
PS4	Firefox IOS QR Code Reader XSS	18-Jul-2019	10-Dec-2019	CVE-2019-17003
PS5	Microsoft Edge Elevation of Privilege Vulnerability	28-Nov-2018	03-Dec-2019	CVE-2019-0678
PS6	Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability	08-Jan-2018	01-Oct-2018	CVE-2018-15968
PS7	Opera Mini Location Permission Spoof	02-Aug-2018	18-Aug-2018	CVE-2018-16135
PS8	Foxit Reader - CPDF_Parser::m_pCryptoHandler - Use After Free - RCE	08-Jan-2018	16-Aug-2018	CVE-2018-14442
PS9	jscript.dll - ActiveXObject BSTR - Use After Free	09-Jan-2018	14-Aug-2018	CVE-2018-8389
PS10	Adobe Acrobat Reader Heap Overflow Remote Code Execution Vulnerability	08-Jan-2018	10-Jul-2018	CVE-2018-12798
PS11	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	19-Jan-2018	20-Apr-2018	CVE-2018-9950
PS12	Foxit Reader CPDF_Object Use-After-Free Remote Code Execution Vulnerability	19-Jan-2018	20-Apr-2018	CVE-2018-9951
PS13	Foxit Reader – Uninitialized Memory – Arbitrary Write Vulnerability	05-May-2017	07-Jul-2017	CVE-2017-10994
PS14	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	18-May-2017	07-Jul-2017	CVE-2017-10942
PS15	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	01-Jun-2017	07-Jul-2017	CVE-2017-10944
PS16	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	18-May-2017	07-Jul-2017	CVE-2017-10943
PS17	Foxit Reader Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	03-Jan-2017	09-Mar-2017	CVE-2017-8453
PS18	Out of Bounds Write Heap Buffer Google Chrome PDFium	25-Nov-2016	09-Mar-2017	CVE-2017-5032
PS19	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	22-Feb-2017	09-Mar-2017	CVE-2017-8455
PS20	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	03-Jan-2017	09-Mar-2017	CVE-2017-8454
PS21	Memory Corruption Mach-O 2	25-Jun-2016	05-Aug-2016	CVE-2017-8775
PS22	Non-ASLR & DEP Modules	09-Jun-2016	01-Aug-2016	CVE-2017-8776
PS23	Insecure Libray Loading	09-Jun-2016	01-Aug-2016
PS24	OOB Write Heap Buffer dwCompressionSize MS-WIM	13-Jul-2016	20-Jul-2016	CVE-2017-8773
PS25	Memory Corruption Mach-O 1	25-Jun-2016	11-Jul-2016	CVE-2017-8774
PS26	OOB Write Stack Buffer LC_UNIXTHREAD.cmdsize Mach-O	09-Jun-2016	11-Jun-2016	CVE-2017-5005
PS27	Adobe Reader Type Confusion - Memory Corruption Vulnerability	05-Dec-2016	06-Apr-2016	CVE-2017-3038
PS28	Microsoft Internet Explorer CDOMStringDataList::InitFromString Out-Of-Bounds Indexing Information Disclosure Vulnerability	08-Sep-2015	10-Nov-2015	CVE-2015-6086
PS29	Hardcoded AES 256 bit key used in Kankun Smart socket and its mobile App	25-May-2015	05-Jun-2015	CVE-2015-4080
PS30	CVE-2014-8446 – Adobe Acrobat/Reader – Memory Corruption	15-May-2014	09-Dec-2014	CVE-2014-8446