Explore >> Select a destination

You are here

 srcincite.io
ActiveX Exploitation in 2019 :: Instantiation is not Scripting
| | statuscode.ch
From Markdown to RCE in Atom - Lukas' Random Thoughts
12.7 parsecs away

Travel
| | Recently I took a look atAtom, a text editor by GitHub. With a little bit of work, I was able to chain multiple vulnerabilities in Atom into an actual Remote Code Execution. The vulnerabilities have been fixed in the1.21.1 release on October 12th, 2017after I reported it via theirHackerOne program. In case you want to...
| | parsiya.net
Attack Surface Analysis - Part 2 - Custom Protocol Handlers
13.7 parsecs away

Travel
| | [AI summary] The provided text is a detailed technical article discussing various methods and techniques for exploiting custom protocol handlers and command-line switches in applications. It covers topics such as UNC path injection, command-line switch abuse, remote file execution, and leveraging startup directories for persistence. The article also includes practical examples, tools like Nirsoft's URLProtocolView, and advice on how to discover and exploit vulnerabilities in applications.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
10.5 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | cfotech.asia
Blackline achieves ISO/IEC certifications for security & data privacy
29.1 parsecs away

Travel
| Cloud-based accounting firm BlackLine has achieved ISO/IEC 27018 and 27701 certifications for its security and data privacy standards.