Technology ❯ Cybersecurity ❯ Threats ❯ Exploits

Remote Code Execution

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Slow update rates mean routine restore actions can trigger a chain that leaks the plugin’s secret key and allows unauthenticated imports.

Microsoft Ships Record Patch Tuesday With 622 Fixes

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

PolyShell Flaw Puts Magento Stores at Risk as Fix Remains Pre-Release

Google Rushes Patch for Chrome Zero‑Day Exploited in the Wild

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

Veeam Ships Fixes for Critical Backup & Replication RCE, Urges Update to 13.0.1.1071

CISA Adds Actively Exploited WinRAR and Windows Flaws to KEV, Sets Dec. 30 Deadline

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

Critical 'RediShell' Bug in Redis Gets Fix as Tens of Thousands Remain Exposed

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits

Microsoft Delivers August Patch Tuesday With Over 100 Fixes Including Kerberos Zero-Day

Microsoft Patches 91 Flaws, Including Four Zero-Days in November Update

Microsoft Urges Immediate Patching of Critical Windows Vulnerabilities