/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 itm4n.github.io
Windows DLL Hijacking (Hopefully) Clarified | itm4n's blog
| | googleprojectzero.blogspot.com
Project Zero: Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege
3.0 parsecs away

Travel
| | Posted by James Forshaw, Project Zero Previously I presented a technique to exploit arbitrary directory creation vulnerabilities on Wi...
| | parsiya.net
No, You Are Not Getting a CVE for That
3.3 parsecs away

Travel
| | [AI summary] A security engineer explains why 'style points' like unquoted service paths or 404 injection are not real vulnerabilities and clarifies the distinction between code injection at current privilege levels versus actual privilege escalation.
| | neodyme.io
The Key to COMpromise - Abusing a TOCTOU race to gain SYSTEM, Part 2 - Neodyme
3.4 parsecs away

Travel
| | In this series of blog posts, we cover how we could exploit five reputable security products to gain SYSTEM privileges with COM hijacking. If you've never heard of this, no worries. We introduce all relevant background information, describe our approach to reverse engineering the products' internals, and explain how we finally exploited the vulnerabilities. We hope to shed some light on this undervalued attack surface.
| | unit42.paloaltonetworks.com
Threat Brief: RCE Vulnerability CVE-2023-3519 on Customer-Managed Citrix Servers
21.7 parsecs away

Travel
| RCE vulnerability CVE-2023-3519 affects Citrix NetScaler products. This threat brief examines the current evidence, attack scope and interim guidance.