/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.andlabs.org
Attack and Defense Labs: XSSing client-side dynamic HTML includes by hiding HTML inside images and more
| | spawnzii.github.io
[Avent ESNA] Web - 777 Cyber casino :: SpawnZii
5.8 parsecs away

Travel
| | Introduction Every year ESNA organizes a CTF as an advent calendar, so there is a new challenge every day on a different theme, like pwn, forensic, programming, reverse and web. To motivate students to participate, the TOP 8 of the general ranking will be selected to participate in the CTF of EC2. The challenges are proposed by Worty & iHuggsy, but also by other trusted students ;). I was lucky enough to be able to create a challenge for the occasion, so I will start with this one.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
6.1 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | blogs.juniper.net
Linux Servers Hijacked to Implant SSH Backdoor | Official Juniper Networks Blogs
6.3 parsecs away

Travel
| | A Control Web Panel vulnerability is being used to compromise SSH servers by injecting code via dynamic library preloading.
| | www.darktrace.com
Cybersecurity for financial services: Definitions & Examples
24.4 parsecs away

Travel
| Darktrace's Cyber AI Glossary explains how cybersecurity mitigates risks for financial services, ensuring secure and uninterrupted operations.