Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:06 a.m.•24 views

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution...

9.8CVSS7.6AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/15 7:15 p.m.•33 views

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution...

9.8CVSS0.00403EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•1 views

CVE-2024-23168: Missing Origin Validation in WebSockets

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution...

9.8CVSS6.3AI score0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/15 12:00 a.m.•20 views

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution...

7.8AI score0.00403EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/08/15 12:00 a.m.•15 views

XSOverlay 安全漏洞

XSOverlay is a desktop overlay application for OpenVR by the individual developer Xiexe. A security vulnerability exists in XSOverlay that originates from sending malicious commands to the WebSocket API and can lead to arbitrary code execution...

9.8CVSS7.8AI score0.00403EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/08/15 12:00 a.m.•39 views

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution...

0.00403EPSS
SaveExploits0References3
CVE
CVE
•added 2024/08/15 12:00 a.m.•112 views

CVE-2024-23168

A vulnerability exists in Xiexe XSOverlay versions prior to build 647 , a desktop overlay application for OpenVR. The flaw allows non-local websites to send malicious commands to the WebSocket API due to missing origin validation, which can result in arbitrary code execution . To resolve this iss...

9.8CVSS7.8AI score0.00403EPSS
SaveExploits0References3
Rows per page
Query Builder