/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 y4y.space
Learning JNDI Injection From CVE-2021-21985 - !
| | parsiya.net
RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
5.3 parsecs away

Travel
| | [AI summary] The text discusses a security vulnerability in the VS Code Remote - WSL extension, specifically the CVE-2021-43907 bug. It outlines the vulnerability's details, the researcher's attempts to exploit it, and the steps taken to address it. The author provides a detailed analysis of the attack vector, the mitigation strategies, and the broader implications of such vulnerabilities in software development.
| | srcincite.io
IAM Whoever I Say IAM :: Infiltrating VMWare Workspace ONE Access Using a 0-Click Exploit
3.2 parsecs away

Travel
| | On March 2nd, I reported several security vulnerabilities to VMWare impacting their Identity Access Management (IAM) solution. In this blog post I will discu...
| | www.thezdi.com
Zero Day Initiative - A Series of Unfortunate Images: Drupal 1-click to RCE Exploit Chain Detailed
4.1 parsecs away

Travel
| | [AI summary] An analysis of two chained Drupal vulnerabilities (ZDI-19-130 and ZDI-19-291) that allow attackers to achieve remote code execution via a PHP deserialization bug and a PCRE regular expression flaw.
| | www.thezdi.com
Zero Day Initiative - CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
21.2 parsecs away

Travel
|