Research Blog
Stay up to date with the newest security advisories, vulnerability reports, and platform developments—keeping your products secure and compliant.
Featured research articles
%201.avif)
All research articles
ClamAV Critical Patch Review
In this technical deep dive, ONEKEY explores the underlying issues fixed by the recent critical patch released by ClamAV. 👉
Security Advisory: Remote Command Execution in binwalk
Learn about the security vulnerability in binwalk v2.1.2b-2.3.3 that allows malicious PFS file extraction and remote code execution. 👉
Security Advisory: Unauthenticated Configuration Export in Multiple WAGO Products
ONEKEY identified an unauthenticated configuration export in industrial controllers from WAGO . Read the latest Security Advisory here 👉
Latest Developments in Unblob
After initial launch of unblob at Blackhat and DEFCON, the project continues to grow and we want to share a few things with you. Read more!
Security Advisory: Asus M25 NAS Vulnerability
ONEKEY identifies a command injection bug in the M25 NAS from Asus. Read the latest Security Advisory here 👉
OpenSSL released a patch for high severity vulnerabilities – do operators and vendors of connected devices need to worry?
OpenSSL released a patch for high severity vulnerabilities – do operators and vendors of connected devices need to worry? Read more!
Security Advisory: NETGEAR Routers FunJSQ Vulnerabilities
Detailed vulnerability analysis identifies several problems in FunJSQ on NETGEAR Routers & Orbi WiFi Systems. Read latest Security Advisory here 👉
Advisory: Cisco Small Business RV Series Routers Web Filter Database Update Command Injection Vulnerability
The advisory describes a vulnerability ONEKEY identified when hunting for bugs to craft exploit chains for PWN2OWN 2021. Read advisory!
Advisory: FESTO: CECC-X-M1 - Command Injection Vulnerabilities
To evaluate and strengthen the automated vulnerability detection capabilities of ONEKEY, we frequently download and analyze firmware images from a variety of vendors. This is how we stumbled upon the CECC-X-M1 product line, an industrial controller manufactured by FESTO.
check out white papers
Explore in-depth whitepapers on cybersecurity and compliance, designed to strengthen your product’s security and compliance.
Ready to automate your Product Cybersecurity & Compliance?
Make cybersecurity and compliance efficient and effective with ONEKEY.