Tag: remote code execution

CISA has added a critical Ray vulnerability to its KEV catalog after active exploitation reports. The flaw could allow remote code execution through browser based DNS rebinding attacks.

A critical vulnerability in the Forminator WordPress plugin could allow unauthenticated attackers to upload malicious PHP files and execute remote code on vulnerable websites.

Fortinet researchers have identified the Evooo1Bot Linux botnet, which exploits multiple known vulnerabilities to compromise internet facing devices and convert them into SOCKS5 proxy nodes.

Security researchers have observed exploitation attempts targeting SAP Commerce Cloud vulnerability CVE 2026 58231 only days after SAP released a patch for the critical remote code execution flaw.

Security researchers warn that a newly disclosed GeoServer zero day SQL injection vulnerability is being actively targeted and could lead to remote code execution on vulnerable systems.

OpenWrt has released versions 24.10.8 and 25.12.5 to address a critical DHCPv6 vulnerability and multiple security flaws affecting network services, with users urged to install the latest updates.

Redis has released seven security updates after researchers disclosed AI discovered vulnerabilities that could enable authenticated remote code execution through Redis Streams and RedisBloom components.

Security researchers are warning of widespread exploitation of two critical WordPress vulnerabilities that allow unauthenticated remote code execution and complete website compromise.

CISA has added the actively exploited Microsoft SharePoint vulnerability CVE 2026 58644 to its Known Exploited Vulnerabilities catalog and urged organizations to apply security updates immediately.

Cybersecurity researchers have identified six vulnerabilities in protobuf.js that could expose Node.js applications to remote code execution and denial of service attacks, impacting cloud services, AI systems, and CI/CD pipelines.

Microsoft has released patches for a record 206 security vulnerabilities, including three publicly disclosed zero day flaws and several critical remote code execution risks affecting Windows systems.

Microsoft has patched SharePoint remote code execution vulnerability CVE 2026 45659 affecting multiple server versions, allowing authenticated attackers to execute code remotely.