/explore
|
You are here 
|
intrigus.org | ||
| | | | |
machevalia.blog
[AI summary] The article details a remote code execution vulnerability in a .tgz file upload feature, where the server's parsing logic allowed an attacker to bypass filters by crafting a malicious archive with a web shell. |
|
| | | | | ||
| | | | |
www.zerodayinitiative.com
[AI summary] A vulnerability in NVIDIA Transformers4Rec allows remote code execution via deserialization of untrusted data, requiring user interaction to exploit. |
|
| | | | | ||
| | | | |
artsploit.blogspot.com
When I first encountered Kafka UI, I was thrilled that such a dangerous functionality is exposed without authentication. After some time I d... |
|
| | | | | ||
| | | | |
www.thezdi.com
[AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution. |
|
| | | |||
