CVE-2024-42472 - Dangerous Flatpak Escape – How a Sandbox Hole Could Expose Your Files
Flatpak is a popular application distribution and sandboxing system used by many Linux distributions to isolate apps, but early 2024 revealed a significant hole. CVE-2024-42472
CVE-2024-7262 - Weaponized Path Validation Bug in Kingsoft WPS Office Lets Attackers Load Windows Libraries with Malicious Spreadsheets
Kingsoft WPS Office is one of the most popular office suites in the world, especially in China. Recently, a significant security vulnerability (CVE-2024-7262) has been
CVE-2024-7263 - New Arbitrary DLL Loading Bug in Kingsoft WPS Office – Technical Deep Dive & Exploit Walkthrough
A new vulnerability, CVE-2024-7263, affects Kingsoft WPS Office Windows versions 12.2..13110 up to *but not including* 12.2..17115. Attackers can exploit improper
CVE-2024-5914 - Command Injection in Palo Alto Networks Cortex XSOAR CommonScripts Pack – How Attackers Can Run Arbitrary Commands
In June 2024, security researchers uncovered a critical command injection vulnerability in Palo Alto Networks Cortex XSOAR CommonScripts Pack. The flaw, tracked as CVE-2024-5914, could
Episode
00:00:00
00:00:00