|
You are here |
blog.darkwolfsolutions.com | ||
| | | | |
www.thezdi.com
|
|
| | | | | [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution. | |
| | | | |
neroteam.com
|
|
| | | | | Unearthed during the Great Heist competition, unauthenticated remote code execution vulnerability discovered in MultiversX Play API, exploit allows arbitrary ... | |
| | | | |
swordbytes.com
|
|
| | | | | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application. | |
| | | | |
nextjs.org
|
|
| | | A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versions immediately. | ||