/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 robert.ocallahan.org
Microsoft's Chrome Exploitation And The Limitations Of Control Flow Integrity
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
6.8 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | artemislena.eu
A secure operating system
5.4 parsecs away

Travel
| | [AI summary] A detailed security analysis and review of desktop and mobile operating systems, evaluating the safety features, vulnerabilities, and trade-offs of platforms such as Linux, Android, MacOS, Windows, BSD, and experimental options like Qubes OS.
| | blog.fuzzing-project.org
Diving into Control Flow Integrity | The Fuzzing Project
4.1 parsecs away

Travel
| | [AI summary] A post explores the deployment of Control Flow Integrity (CFI) in Linux systems using Clang, detailing the process of compiling hardened applications, debugging CFI-related errors, and the benefits of using CFI for both security hardening and bug detection.
| | sergioprado.blog
Introduction to Embedded Linux Security - part 2 - sergioprado.blog
7.8 parsecs away

Travel
| This is the second part of the article about embedded Linux security.