/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 slashcrypto.org
Persis High-Level Human Resource Software - Online Applicant Portal Security Advisory (CVE-2020-35753) - slashcrypto's page
| | borncity.com
Palo Alto: Ivanti Endpoint Manager Mobile Vulnerabilities Readback (August 2023) | Born's Tech and Windows World
12.2 parsecs away

Travel
| | [German]Vendor Ivanti has had to warn about critical vulnerabilities in its Endpoint Manager Mobile (EPMM) several times in recent weeks and issue security updates. The starting point for this flood of security reports was that Norway's government was hacked via Ivanti-Zero-Day. For several weeks now, companies around the world - a great many of them...
| | thehackernews.com
Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL
12.4 parsecs away

Travel
| | Beware! Kinsing cryptojacking attacks are targeting Kubernetes clusters through misconfigured PostgreSQL.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
10.1 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | www.thezdi.com
Zero Day Initiative - Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
18.6 parsecs away

Travel
| [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution.