/explore
|
You are here 
|
blog.mindedsecurity.com | ||
| | | | |
spawnzii.github.io
Introduction Every year ESNA organizes a CTF as an advent calendar, so there is a new challenge every day on a different theme, like pwn, forensic, programming, reverse and web. To motivate students to participate, the TOP 8 of the general ranking will be selected to participate in the CTF of EC2. The challenges are proposed by Worty & iHuggsy, but also by other trusted students ;). I was lucky enough to be able to create a challenge for the occasion, so I will start with this one. |
|
| | | | | ||
| | | | |
swordbytes.com
SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application. |
|
| | | | | ||
| | | | |
pmig96.wordpress.com
When I heard of WebAssembly (WASM for short) a few years ago, I thought: take your C program, compile it to WASM and the browser will simply run it, right? Well, WASM is not (yet) a first-class citizen in the browser world. It does not have access to all APIs and resources that JavaScript has.... |
|
| | | | | ||
| | | | |
www.thezdi.com
[AI summary] A security researcher details the discovery, exploitation, and mitigation of a critical remote code execution vulnerability in the NVIDIA Merlin Transformers4Rec library caused by unsafe Pickle deserialization. |
|
| | | |||
