PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

RetroArch for Windows, Versions 1.9.0 - 1.9.4 Advisory

bishopfox.com | vulnerability | #windows | #powershell | #vulnerability | #advisory | #command-injection | #retroarch
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Advisory: RetroArch for Windows 1.9.0-1.9.4 text-to-speech passes unsanitized filenames to PowerShell, so crafted file or directory names execute commands when read aloud; disable TTS until patched.
Published
Collected

Related coverage

Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bishopfox.com
Oracle WebLogic Node Manager allows arbitrary configuration via UNC path
Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
Medium · vulnerability · depthfirst.com
Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)
Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.
vulnerability · swarm.ptsecurity.com
Hunting for bugs in VMware: View Planner and vRealize Business for Cloud
PT SWARM uncovers unauthenticated RCEs in VMware View Planner (CVE-2021-21978) and vRealize Business for Cloud (CVE-2021-21984). The View Planner flaw traces to an unauthenticated WSGI log-upload endpoint in its dockerized web stack, leading to command execution.
Back