/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 tantosec.com
CVE-2022-41343 - RCE via Phar Deserialisation
| | srcincite.io
SQL Injection Double Uppercut :: How to Achieve Remote Code Execution Against PostgreSQL
3.3 parsecs away

Travel
| | When I was researching exploit primitives for the SQL Injection vulnerabilities discovered in Cisco DCNM, I came across a generic technique to exploit SQL In...
| | www.cyberkendra.com
Curl Fix Heap Buffer Overflow Vulnerability Could Lead to Remote Code Execution - Cyber Kendra
2.8 parsecs away

Travel
| | SOCKS5 heap buffer overflow vulnerability in Curl lead to arbitrary remote code execution.
| | www.zerodayinitiative.com
ZDI-25-833 | Zero Day Initiative
2.1 parsecs away

Travel
| | [AI summary] A vulnerability in NVIDIA Transformers4Rec allows remote code execution via deserialization of untrusted data, requiring user interaction to exploit.
| | www.thezdi.com
Zero Day Initiative - Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
6.8 parsecs away

Travel
| [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution.