/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 parsiya.net
RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
| | googleprojectzero.blogspot.com
Project Zero: A year of Windows kernel font fuzzing #1: the results
6.8 parsecs away

Travel
| | Posted by Mateusz Jurczyk of Google Project Zero This post series is about how we used at-scale fuzzing to discover and report a tot...
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
4.7 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | blog.thalium.re
Achieving Remote Code Execution in Steam: a journey into the Remote Play protocol
3.7 parsecs away

Travel
| | [AI summary] The blog post discusses the author's experience in vulnerability research and exploitation targeting Steam and its related products, including Steam Link and Remote Play. It covers various vulnerabilities such as format string vulnerabilities, request forgery, heap overflows, and a remote code execution (RCE) exploit. The author also details their interactions with HackerOne and Valve, highlighting the challenges in getting timely responses and the eventual resolution of the reported issues.
| | www.thezdi.com
Zero Day Initiative - CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability
13.6 parsecs away

Travel
| [AI summary] Report details a patched remote code execution vulnerability in Windows Libarchive triggered by extracting malicious RAR archives.