Search: “code-execution”

62 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 20 Vulnerability 18 AI safety & security 6 Data breach 5 Threat actor 3 Industry 2 Model release 2 Malware 2 Ransomware 2 Tools 1 AI tools & infra 1

SeverityAll critical 32 high 15 medium 8 low 1 info 6

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device

The Hacker NewsJun 18, 15:29 UTC · Jun 18, 2026Exploit / PoC CVE-2026-20127

60

Unauthenticated file upload in Amasty Order Attributes for Magento

Sansec (Magento / e-commerce security)Jun 15, 20:13 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2026-53787

60

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026AI safety & security in the wildCVE-2026-47101 CVE-2026-47102 CVE-2026-40217+1 CVEs

50

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

The Hacker NewsJun 11, 06:23 UTC · Jun 11, 2026Industry

42

Mythos Preview can weaponize N-day vulnerabilities in hours

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2026Vulnerability

55

Canonical releases Workshop for one-command sandboxed dev environments on Ubuntu

Help Net SecurityMay 28, 00:00 UTC · May 28, 2026AI tools & infra

30

VMware fixed a code execution flaw in Fusion hypervisor

Security AffairsSep 3, 21:26 UTC · Sep 3, 2024Vulnerability CVE-2024-38811

47

Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data

The Hacker NewsMay 27, 05:55 UTC · May 27, 2024Data breach in the wild

60

Suspected Iranian cyber-espionage campaign targets Middle East aerospace, defense industries

The RecordFeb 28, 20:30 UTC · Feb 28, 2024Threat actor

57

Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks

Ars Technica · SecurityJan 10, 22:18 UTC · Jan 10, 2024Malware in the wildCVE-2023-46805 CVE-2024-21887

60

Google quietly corrects previously submitted disclosure for critical webp 0

Ars Technica · SecuritySep 27, 00:47 UTC · Sep 27, 2023Vulnerability CVE-2023-4863 CVE-2023-5129

60

Remote sex toys might spice up your love life – but crooks could also get a kick out of them

Security AffairsFeb 15, 05:37 UTC · Feb 15, 2022Vulnerability1

30

Cyberium malware-hosting domain employed in multiple Mirai variants campaigns

Security AffairsJun 16, 06:17 UTC · Jun 16, 2021Malware in the wildCVE-2020-10987 CVE-2017-17215 CVE-2014-83611

60

Apache Software Foundation fixes code execution flaw in Apache Struts 2

Security AffairsDec 9, 07:36 UTC · Dec 9, 2020Exploit / PoC CVE-2020-17530 CVE-2019-02301

60

Mozilla ups bug bounty rewards to $15,000 on critical sites

CyberScoopNov 20, 17:31 UTC · Nov 20, 2019Exploit / PoC

60

A critical Linux Wi-Fi bug could be exploited to fully compromise systems

Security AffairsOct 19, 13:45 UTC · Oct 19, 2019Vulnerability CVE-2019-176661

60

Researchers discovered a code execution flaw in NSA GHIDRA

Security AffairsOct 9, 07:21 UTC · Oct 9, 2019Vulnerability CVE-2019-16941

60

Crooks leverages .htaccess injector on Joomla and WordPress sites for malicious redirects

Security AffairsMay 27, 12:39 UTC · May 27, 2019Exploit / PoC CVE-2018-9206

60

Zerodium Offers to Buy Zero

The Hacker NewsJan 8, 12:00 UTC · Jan 8, 2019Exploit / PoC

60

DDoS attacks in Q2 2017

Kaspersky SecurelistAug 1, 09:00 UTC · Aug 1, 2017Ransomware

45

Mozilla will fix the cross-platform RCE flaw that threatened Tor anonymity

Security AffairsSep 18, 11:36 UTC · Sep 18, 2016Vulnerability

42

The Epic Turla Operation

Kaspersky SecurelistAug 7, 13:55 UTC · Aug 7, 2014Threat actor CVE-2013-5065 CVE-2013-3346 CVE-2012-1723

60