Explore >> Select a destination

You are here

 palant.info
McAfee WebAdvisor: From XSS in a sandboxed browser extension to administrator privileges | Almost Secure
| | www.cybereason.com
CVE-2025-55182: Critical Vulnerability, React2Shell, Allows for Unauthenticated RCE
2.7 parsecs away

Travel
| | React2Shell vulnerability, tracked as CVE-2025-55182, recently discovered in React's Server Components, could allow for pre-authentication remote code execution.
| | www.thezdi.com
Zero Day Initiative - CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs
2.3 parsecs away

Travel
| | [AI summary] Trend Micro researchers detail a patched remote code execution vulnerability in VMware Aria Operations for Logs caused by insecure deserialization of user-supplied data.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
0.9 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | www.thezdi.com
Zero Day Initiative - Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
11.4 parsecs away

Travel
| [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution.