Technology ❯ Cybersecurity ❯ Threats

Remote Code Execution

Zero-Day Exploits Buffer Overflow Exploitation Techniques Exploits Denial of Service CVE-2025-59287 User Privilege Escalation Exploitation Privilege Escalation Keyloggers Untrusted Data Deserialization CVE-2025-30023 Malicious Git Hooks CVE-2025-42944 RediShell ViewState Deserialization CVE-2025-54253 Cross-Site Scripting CVE-2026-20952 Authentication Bypass CVE-2026-20841 SmarterMail Vulnerabilities Code Injection Malicious Exploits Outlook Exploits API Security CVE-2026-21858 Exploit CVE-2024-28986 Vulnerabilities in Routers

Claude Code Flaws Enabled RCE and API Key Theft via Malicious Repo Configs

Repository configuration in AI tooling created an execution layer exploitable for RCE, enabling API key theft.

Researchers Expose Critical Flaws in Popular VS Code Extensions Downloaded Over 125 Million Times

Ivanti Patches EPM as EPMM Exploitation Campaign Traces to Single Bulletproof-Hosted IP

CISA Forces Three-Day Patch for Actively Exploited SolarWinds Web Help Desk Flaw

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

Critical 'Ni8mare' Flaw Exposes n8n Servers to Full Takeover as Scans Surge

Fluent Bit Flaws Disclosed, Patches Issued to Stop Log Tampering and RCE

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

CISA Adds Actively Exploited Adobe AEM Forms Flaw to KEV Catalog

Active Exploits Target Gladinet CentreStack and TrioFox Zero-Day That Can Lead to RCE

RediShell: Critical Redis RCE Triggers Urgent Updates With 60,000 Servers Unauthenticated

SAP Releases September Patches for Critical NetWeaver Bugs Including 10.0 RCE

CISA Adds Exploited Git and Citrix Flaws to KEV, Orders Fixes by Sept. 15