Search: “remote code execution”

10,333 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 4239 Malware 2030 Exploit / PoC 2003 Ransomware 1094 Threat actor 443 Data breach 254 Advisory 138 Phishing & fraud 87 Policy & legal 53 Industry 48 Research 24 Tools 11

SeverityAll critical 5726 high 3269 medium 1310 low 79 info 40

VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Insecure deserialization in Kaltura's legacy HTML5 Player V2 (mwEmbed) allows arbitrary file read and remote code execution; Player V7 is unaffected.

CERT/CC issued VU#308749 for two flaws in Kaltura's HTML5 Player V2 library (mwEmbed/html5lib), both caused by the same insecure deserialization bug. The flaws enable arbitrary file read and remote code execution via the exposed mwEmbedLoader.php endpoint. Affected versions include html5lib v2.45, v2.103 and earlier, and other v2.x releases; the currently supported Player V7 is unaffected. No evidence of exploitation was cited.

CERT/CC Vulnerability NotesAug 25, 16:11 UTC · 22d agoVulnerability

Vulnerability Spotlight: Remote code execution vulnerabilities in Adobe Acrobat Reader

Cisco TalosMay 14, 18:23 UTC · May 14, 2019Vulnerability in the wildCVE-2019-7761 CVE-2019-7831

Vulnerability Spotlight: Multiple Vulnerabilities in Cesanta Mongoose Server

Cisco TalosOct 31, 15:12 UTC · Oct 31, 2017Vulnerability CVE-2017-2891 CVE-2017-2892 CVE-2017-2893+5 CVEs

Kubernetes flaws could lead to remote code execution on Windows endpoints

Security AffairsSep 14, 07:18 UTC · Sep 14, 2023Vulnerability CVE-2023-3676 CVE-2023-3893 CVE-2023-3955

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

The Hacker NewsDec 4, 15:38 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

A new flaw in OpenSSH can lead to remote code execution

Security AffairsJul 10, 14:37 UTC · Jul 10, 2024Vulnerability CVE-2024-6409 CVE-2024-6387

Solarwinds Orion Platform updates fix two remote code execution issues

Security AffairsMar 26, 14:37 UTC · Mar 26, 2021Vulnerability CVE-2021-3109 CVE-2020-35856

Vulnerability Spotlight: WAGO products contain remote code execution, other vulnerabilities

Cisco TalosMar 9, 14:47 UTC · Mar 9, 2020Vulnerability CVE-2019-5107 CVE-2019-5134 CVE-2019-5135+9 CVEs

Vulnerability Spotlight: Remote code execution vulnerabilities in Adobe Acrobat Reader

Cisco TalosMay 12, 17:00 UTC · May 12, 2020Vulnerability in the wildCVE-2020-9607 CVE-2020-9609

TP-Link fixes 2 RCE flaws in TL

Security AffairsNov 20, 11:34 UTC · Nov 20, 2018Vulnerability CVE-2018-3950 CVE-2018-3951 CVE-2018-3948+1 CVEs

PerfektBlue Bluetooth Vulnerabilities Expose Millions of Vehicles to Remote Code Execution

The Hacker NewsJul 12, 12:32 UTC · Jul 12, 2025Vulnerability CVE-2024-45434 CVE-2024-45431 CVE-2024-45433+1 CVEs

Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities

Cisco TalosJan 13, 18:29 UTC · Jan 13, 2026Vulnerability in the wildCVE-2026-20805 CVE-2026-20822 CVE-2026-20854+14 CVEs

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Excel

Cisco TalosNov 12, 19:07 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-1448

Severe Framelink Figma MCP Vulnerability Lets Hackers Execute Code Remotely

The Hacker NewsOct 9, 13:35 UTC · Oct 9, 2025Vulnerability CVE-2025-53967

Google fixed Critical Remote Code Execution flaw in Android

Security AffairsAug 3, 15:45 UTC · Aug 3, 2022Vulnerability CVE-2022-20345 CVE-2022-20237 CVE-2022-20400+2 CVEs

Vulnerability Spotlight: SNIProxy contains remote code execution vulnerability

Cisco TalosMar 30, 14:35 UTC · Mar 30, 2023Vulnerability in the wildCVE-2023-25076

Vulnerability Spotlight: Foxit PDF Reader JavaScript Array.includes remote code execution vulnerability

Cisco TalosSep 30, 14:41 UTC · Sep 30, 2019Vulnerability in the wildCVE-2019-5031

Vulnerability Spotlight: Remote code execution vulnerability Apple Safari

Cisco TalosSep 17, 14:21 UTC · Sep 17, 2020Vulnerability in the wildCVE-2020-9951

ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability

ZDI advisory discloses Microsoft Exchange remote code execution flaw (CVE-2026-62911, CVSS 7.2) with bypassable authentication.

ZDI advisory ZDI-26-535 describes an external control of file path vulnerability in Microsoft Exchange, tracked as CVE-2026-62911 with a CVSS score of 7.2. Remote attackers can execute arbitrary code on affected installations. Although authentication is required, the existing authentication mechanism can be bypassed.

ZDI Published AdvisoriesAug 11, 05:00 UTC · Aug 11, 2026Advisory CVE-2026-62911