HP's security research team publishes vulnerability analyses, exploit write-ups, and Pwn2Own results covering Windows, OpenSSL, Flash, and POS systems.
HN links it for technical vulnerability write-ups, the Pwn2Own 2015 results, and the POS hacking post; commenters also grumble about its unwieldy URLs.
Not all of them. One was a use after free, which isn't related to buffer overflows. Two other ones are not clear what they were caused by:
By Mariusz Mlynski:
Against Mozilla Firefox, two vulnerabilities, one allowing privilege escalation within the browser and one bypassing browser security measures.
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-results-for-Thursday-Day-Two/ba-p/6412622#.UyYOW9tx0xC
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-results-for-Wednesday-Day-One/ba-p/6410984#.UyYOXttx0xC
It seems that both Heartbleed and this MITM vulnerability were introduced by Robin Seggelmann [1], which will surely drive a lot of speculations...
[1] http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002#.U5Cjpnmx3UY
This comment provides a lot of insight into the situation from the perspective of someone who claims to "install and provide tech support" for the Aloha POS system: http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Hacking-POS-Terminal-for-Fun-and-Non-profit/bc-p/6541118#M349
All were running on Windows, except Safari which was running on OSX. You can see the details at this overly long URL from the contest organizers:
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2015-Exploitation-at-its-Finest/ba-p/6708265#.VQyBsbfYDOQ
For those using the Java stack we have found HP's Fortify static analysis tool helpful in automatically detecting XXE vulnerabilities.
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Q2-2013-HP-Fortify-Software-Security-Content-Update/ba-p/6119297
Yes was a Microsoft Hand , they killend it and went to more complex indexed db that no one loves
http://h30499.www3.hp.com/t5/Following-the-Wh1t3-Rabbit-Down/W3C-Buries-quot-Web-SQL-Database-Standard-quot/ba-p/2407945#.UHBiwlU-on8