Welcome to BFS Labs

A privilege escalation vulnerability was identified which can be used by a local user to elevate privileges.

A privilege escalation vulnerability was identified which can be used by a local user to elevate privileges.

An analysis engine evasion was identified which allows an attacker to completely bypass FireEye's virtualization-based dynamic analysis on Windows and whitelist arbitrary malicious binaries.

A use-after-free vulnerability was identified which allows the execution of arbitrary code on vulnerable installations of Microsoft Internet Explorer.

Multiple vulnerabilities in OpenSSH were identified that could allow successful authentication as an arbitrary user and thus impersonation of other users.