/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 srcincite.io
Smarty Template Engine Multiple Sandbox Escape PHP Code Injection Vulnerabilities
| | paragonie.com
Everything You Need to Know About Preventing Cross-Site Scripting Vulnerabilities in PHP - Paragon Initiative Enterprises Blog
3.9 parsecs away

Travel
| | Although Cross-Site Scripting is one of the most common vulnerabilities on the Internet, it remains an unsolved problem (unlike SQL Injection).
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
4.0 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | dozer.nz
SaltStack API vulnerabilities | dozer.nz
5.1 parsecs away

Travel
| | In November 2020 after seeing a pre-auth RCE (CVE-2020-16846, CVE-2020-25592) get dropped for Salt API, I wanted to find my own. This resulted in CVE-2021-3197, CVE-2021-25281 and CVE-2021-25282, which I detail in this post.
| | c2sp.org
C2SP/static-ct-api.md at main · C2SP/C2SP · GitHub
14.6 parsecs away

Travel
| Community Cryptography Specification Project. Contribute to C2SP/C2SP development by creating an account on GitHub.