CVE-2024-42019 - Extracting NTLM Hashes from Veeam Reporter Service – How Attackers Can Steal Credentials With User Interaction
On June 12, 2024, Veeam released an advisory for a serious vulnerability—CVE-2024-42019—that affects their Reporter Service, a component often installed with Veeam Backup
CVE-2024-36138 - Exploit and Technical Deep Dive—Bypassing the Incomplete Fix of CVE-2024-27980 in Node.js child_process.spawn without `shell` Option
---
Introduction
In April 2024, the Node.js community patched CVE-2024-27980, addressing a critical issue with command injection in the child_process.spawn function. The
CVE-2024-38210 - Unlocking the Microsoft Edge (Chromium) Remote Code Execution – Explained With Code and Insights
---
What is CVE-2024-38210?
On May 14, 2024, Microsoft published information about a critical vulnerability in Microsoft Edge, the Chromium-based web browser that ships with
CVE-2024-8035 - How a Simple Crafted HTML Page Could Trick You in Chrome Extensions (Explained)
---
In the world of browser security, sometimes even small oversights can open doors for opportunistic attackers. Today, I’ll break down a recent Chrome
CVE-2024-8033 - How a Chrome WebApp Install Bug Could Let Attackers Fake UI Elements
In June 2024, researchers discovered a new security vulnerability, now tracked as CVE-2024-8033, affecting Google Chrome on Windows. This flaw let attackers exploit a bug
Episode
00:00:00
00:00:00