CVE-2022-23923

CVE-2022-23923 concerns the jailed Node.js sandbox library. All versions are vulnerable to a sandbox bypass via an exported alert() method that can access the main application; exported methods are stored in the application.remote object. The connected sources provide a POC showing how an attacke...

Robber - Tool For Finding Executables Prone To DLL Hijacking

Robber is a free open source tool developed using Delphi XE2 without any 3rd party dependencies. What is DLL hijacking ?! Windows has a search path for DLLs in its underlying architecture. If you can figure out what DLLs an executable requests without an absolute path triggering this search...