We discovered an arbitrary file read vulnerability in Discourse's image pipeline by chaining a JPEG race condition with ImageMagick and Ghostscript.

A pre-authentication XSS to RCE chain in WordPress Core that allows unauthenticated attackers to achieve remote code execution on any default WordPress installation through the login page.

The HTTP protocol plays a vital role in the seamless functioning of web applications, however, the implementation of HTTP parsers across different technologies can introduce subtle discrepancies, leading to potential security loopholes. In this resea...

Technical breakdown of OnlyShells — a five-vulnerability chain in ONLYOFFICE Desktop Editors combining zero-click XSS, a Chromium V8 RCE, and an update-service LPE to achieve remote code execution as NT AUTHORITYSYSTEM when a victim opens a crafted document.

Analyst note: Proofpoint uses the UNK_ designator to define clusters of activity that are still developing and have not been observed for long enough to receive a numerical TA designation. Key

Multiple Cross-Site Scripting (XSS) Vulnerabilities in Mailcow

Learn how to assess Next.js apps for SSRF, XSS, CSTI, SSTI, CSRF, cache issues, and data leaks. Practical tips, checks, and tools for bug bounty and pentesting.

Technical breakdown of a Remote Code Execution vulnerability in Google Web Designer via a malicious Video Ad Template abusing the NinjaShell API.

XSS to RCE in Google IDX Workstation: A Technical Deep Dive

CVE-2025–0133: Reflected XSS Vulnerability in Palo Alto GlobalProtect Gateway & Portal A reflected cross-site scripting (XSS) vulnerability (CVE-2025–0133) was recently discovered in Palo Alto …

In April 2024, I discovered a high-severity vulnerability in Visual Studio Code (VS Code = 1.89.1) that allows attackers to escalate a Cross-Site Scripting (XSS) bug into full Remote Code Execution (RCE)—even in Restricted Mode. The desktop version of Visual Studio Code runs on Electron. Renderer processes are sandboxed and communicate with the main process through Electron’s IPC mechanism. An XSS vulnerability in the newly-introduced minimal error rendering mode for Jupyter notebooks enables arbitrary JavaScript code to be executed within the vscode-app WebView for the notebook renderer.

ESET researchers uncover a Russia-aligned espionage operation that they named RoundPress and that targets webmail servers via XSS vulnerabilities.

Discover how critical vulnerabilities in browser-based crypto wallets allowed attackers to drain funds without user interaction.

– by TheGrandPew and s1r1us We all know, VSCode is one of the most used Electron App. As a part of our research on hacking electron apps, we thought it would be cool to pwn VSCode and we were able to pwn it. We were able to achieve RCE on VSCode without getting to use any of our new fancy stuff. TL; DR Remote Code execution can be achieved when a victim opens a markdown file in a maliciously crafted VSCode Project or a folder even in VSCode Restricted Mode.

For Cloudflare customers, having Cloudflare is like paying a peace of mind insurance that your system will get 99% protection against…

Please upgrade your Elementor websites

How to semi-automatically find vulnerabilities in WordPress plugins installed on about 10 million websites.

Notes

With some luck and a couple of XSS bugs I was able to break the new Edge

Jaroslav Lobačevski Joplin ElectronJS based Client: from XSS to RCE

# 1. Background The Steam Chat client is a particularly interesting system to attack because it's built using a modern set of technologies with strong security characteristics. It's built on...