/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 gebir.ge
Remote Code Execution as a Service: A Privilege Escalation Journey | GEBIRGE
| | taeluralexis.com
TryHackMe Wreath Writeup - Tae'lur Alexis
0.8 parsecs away

Travel
| | We'll target a network comprising 3 machines, leveraging CVE exploits, pivoting, code obfuscation techniques, and AV bypass strategies.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
1.8 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | parsiya.net
Attack Surface Analysis - Part 2 - Custom Protocol Handlers
1.7 parsecs away

Travel
| | [AI summary] The provided text is a detailed technical article discussing various methods and techniques for exploiting custom protocol handlers and command-line switches in applications. It covers topics such as UNC path injection, command-line switch abuse, remote file execution, and leveraging startup directories for persistence. The article also includes practical examples, tools like Nirsoft's URLProtocolView, and advice on how to discover and exploit vulnerabilities in applications.
| | nextjs.org
Security Advisory: CVE-2025-66478 | Next.js
11.4 parsecs away

Travel
| A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versions immediately.