One Less Click, One More Shell

A look at a code execution vulnerability in the Pake project, where a user-controlled filename in the file-download handler allows arbitrary file writes outside the Downloads directory, leading to persistence and code execution on macOS and Linux. Pake is a popular open-source tool that turns any website into a lightweight, native-feeling desktop application. Pake is Read More One Less Click, One…