|
You are here |
gebir.ge | ||
| | | | |
positive.security
|
|
| | | | | Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered through other browsers (requires confirmation of an inconspicuous dialog) and desktop applications that allow URI opening. | |
| | | | |
taeluralexis.com
|
|
| | | | | We'll target a network comprising 3 machines, leveraging CVE exploits, pivoting, code obfuscation techniques, and AV bypass strategies. | |
| | | | |
palant.info
|
|
| | | | | Looking into Xunlei Accelerator, I discovered a number of flaws allowing remote code execution from websites or local network. It doesn't look like security was considered when designing this application. | |
| | | | |
www.titanfile.com
|
|
| | | We live in an era where cyber threats lurk around every corner, posing significant risks to businesses and organizations worldwide. Being prepared with a comprehensive incident response plan, including the 7 phases of incident response, is no longer an option; it's a necessity. Join us on a journey as we explore the vital components of [...] | ||