/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 positive.security
Allow arbitrary URLs, expect arbitrary code execution | Positive Security
| | palant.info
Numerous vulnerabilities in Xunlei Accelerator application | Almost Secure
2.8 parsecs away

Travel
| | Looking into Xunlei Accelerator, I discovered a number of flaws allowing remote code execution from websites or local network. It doesn't look like security was considered when designing this application.
| | www.cyberkendra.com
Curl Fix Heap Buffer Overflow Vulnerability Could Lead to Remote Code Execution - Cyber Kendra
3.0 parsecs away

Travel
| | SOCKS5 heap buffer overflow vulnerability in Curl lead to arbitrary remote code execution.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
2.4 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | nextjs.org
Security Advisory: CVE-2025-66478 | Next.js
8.7 parsecs away

Travel
| A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versions immediately.