Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React2Shell Microsoft SharePoint React Server Components Critical Vulnerabilities CVE-2025-55182 Microsoft SharePoint Server CVE-2025-10035 Security Patches Insecure Deserialization WatchGuard Firebox

3 ARTICLES

last wk.

JetBrains Patches Critical RCE in TeamCity On‑Premises

The update closes an authentication‑bypass bug that allowed unauthenticated HTTP(S) requests to run operating‑system commands on self‑hosted TeamCity servers, creating urgent risk for exposed instances.

4 ARTICLES

last wk.

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

8 ARTICLES

last mo.

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

4 ARTICLES

last mo.

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

3 ARTICLES

2mo ago

Veeam Patch Closes Critical RCE That Threatened Backup Servers

3 ARTICLES

2mo ago

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

4 ARTICLES

2mo ago

Belgium Says Critical Windows Netlogon Flaw Is Being Actively Exploited

5 ARTICLES

2mo ago

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

3 ARTICLES

2mo ago

Microsoft Patches High-Severity SharePoint Deserialization RCE

4 ARTICLES

2mo ago

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

20 ARTICLES

2mo ago

Microsoft’s May Patch Tuesday Fixes About 137 Flaws With No Zero-Days

3 ARTICLES

2mo ago

Fortinet Patches Critical Flaws Allowing Unauthenticated RCE in FortiSandbox and FortiAuthenticator

7 ARTICLES

3mo ago

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

4 ARTICLES

3mo ago

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

3 ARTICLES

3mo ago

Google Patches Critical Gemini CLI RCE That Threatened CI/CD Workflows

Remote Code Execution

JetBrains Patches Critical RCE in TeamCity On‑Premises

Critical RufRoot Flaw Allowed Unauthenticated Control of Ruflo's AI Bridge

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Attackers Exploit Critical ServiceNow RCE Flaw

Critical Joomla Extension Flaws Exploited for Remote Code Execution

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

Veeam Patch Closes Critical RCE That Threatened Backup Servers

Never miss stories about

Remote Code Execution

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

Belgium Says Critical Windows Netlogon Flaw Is Being Actively Exploited

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

Microsoft Patches High-Severity SharePoint Deserialization RCE

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Microsoft’s May Patch Tuesday Fixes About 137 Flaws With No Zero-Days

Fortinet Patches Critical Flaws Allowing Unauthenticated RCE in FortiSandbox and FortiAuthenticator

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Patches Critical Gemini CLI RCE That Threatened CI/CD Workflows

Never miss stories about

Remote Code Execution