Lucene search
+L

11 matches found

osv_mini
osv_mini
•added 2026/07/13 3:01 a.m.•21 views

MINI-Q6H5-VRCX-57HJ

Bulletin has no description...

7.8CVSS7.2AI score0.00168EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-39575

Malicious code in bioql PyPI...

9CVSS5.9AI score0.00787EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 6:36 a.m.•20 views

CVE-2024-42366

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9CVSS5.8AI score0.00787EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/08 5:15 p.m.•111 views

CVE-2024-42366

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9CVSS0.00787EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/08 4:51 p.m.•127 views

CVE-2024-42366

Summary of CVE-2024-42366 (VR Overlay RCE) VRCX, a VRChat assistant/companion app, contained a vulnerability in versions prior to 2024.03.23 where a CefSharp browser with elevated privileges could be combined with an overlay notification to perform remote command execution (RCE). The issue is doc...

9CVSS5.8AI score0.00787EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2024/08/08 4:51 p.m.•38 views

CVE-2024-42366 VR Overlay RCE

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9CVSS6.7AI score0.00787EPSS
SaveExploits0References4
Mend
Mend
•added 2024/08/08 4:51 p.m.•12 views

CVE-2024-42366

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9.4CVSS5.8AI score0.00787EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/08/08 4:51 p.m.•66 views

CVE-2024-42366 VR Overlay RCE

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9CVSS0.00787EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/08/08 4:51 p.m.•37 views

CVE-2024-42366 VR Overlay RCE

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9CVSS5.8AI score0.00787EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/08/08 12:00 a.m.•10 views

PT-2024-29900

Name of the Vulnerable Software and Affected Versions VRCX versions prior to 2024.03.23 Description The issue affects VRCX, an assistant/companion application for VRChat. It involves a CefSharp browser with over-permission and cross-site scripting via overlay notification, which can be combined t...

9CVSS5.7AI score0.00787EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/08 12:00 a.m.•8 views

CVE-2024-42366: Improper Neutralization of Input During Web Page Generation

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

9CVSS5.8AI score0.00787EPSS
SaveExploits0References1
Rows per page
Query Builder