Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Remote code execution on Discord Desktop

hacktron.ai | vulnerability | #rce | #vulnerability-research | #xss | #discord | #electron | #csp-bypass | #desktop-app

Summary

A detailed walkthrough of chaining XSS with CSP bypasses and Electron misconfigurations to achieve full remote code execution on the Discord Desktop client, with lessons for Electron app hardening.
Published
Collected

original ↗

Related coverage

vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
vulnerability · blog.viettelcybersecurity.com
XSS Discord - Hackerone
A researcher probes Discord's Open Graph link preview, testing og:image and og:video proxy handling for SSRF and potential XSS, documenting filter behaviors and bypass attempts.
blog · hacktron.ai
Turning Cluely Into Malware
How we found a vulnerability in Cluely's Electron app that let any website silently capture screenshots, record audio, and exfiltrate everything - all because of a missing will-navigate handler.
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
research · idnsec.com
Mitigating RCE Impact Like in OpenAI Hack with Defense-in-Depth
Using HacktronAI's OpenAI Discourse hack disclosure, this article covers sandboxing, runtime protection, and AI-assisted defense to shrink the blast radius of RCE across interconnected apps.
back