Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React2Shell React Server Components CVE-2025-55182 Critical Vulnerabilities F5 BIG-IP APM Microsoft SharePoint CVE-2025-10035 WatchGuard Firebox Security Patches CVE-2025-21043

3 ARTICLES

yesterday

Microsoft Patches High-Severity SharePoint Deserialization RCE

The fix stops a flaw that lets a low‑privilege authenticated user run code on SharePoint servers with a CVSS score of 8.8, so administrators should install the update quickly.

4 ARTICLES

last wk.

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

20 ARTICLES

2w ago

Microsoft’s May Patch Tuesday Fixes About 137 Flaws With No Zero-Days

3 ARTICLES

2w ago

Fortinet Patches Critical Flaws Allowing Unauthenticated RCE in FortiSandbox and FortiAuthenticator

7 ARTICLES

2w ago

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

4 ARTICLES

3w ago

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

3 ARTICLES

3w ago

Google Patches Critical Gemini CLI RCE That Threatened CI/CD Workflows

9 ARTICLES

4w ago

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

23 ARTICLES

last mo.

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

3 ARTICLES

last mo.

Marimo RCE Exploited Within Hours of Disclosure

4 ARTICLES

last mo.

Apache ActiveMQ Classic RCE Patched After AI-Assisted Discovery

4 ARTICLES

last mo.

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

5 ARTICLES

last mo.

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

3 ARTICLES

2mo ago

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

3 ARTICLES

2mo ago

Oracle Issues Emergency Patch for Critical RCE in Identity Manager and Web Services Manager

9 ARTICLES

2mo ago

CISA Flags Cisco Firewall Zero-Day Exploited by Interlock, Sets March 22 Patch Deadline

9 ARTICLES

2mo ago

CISA Flags SharePoint, Zimbra Flaws as Actively Exploited, Sets Rapid Federal Patching Deadlines

5 ARTICLES

2mo ago

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

7 ARTICLES

2mo ago

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

3 ARTICLES

2mo ago

Exploit-Driven Hacks Overtake Credential Abuse in Cloud Breaches, Google Warns

Remote Code Execution

Microsoft Patches High-Severity SharePoint Deserialization RCE

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Microsoft’s May Patch Tuesday Fixes About 137 Flaws With No Zero-Days

Fortinet Patches Critical Flaws Allowing Unauthenticated RCE in FortiSandbox and FortiAuthenticator

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Patches Critical Gemini CLI RCE That Threatened CI/CD Workflows

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

Marimo RCE Exploited Within Hours of Disclosure

Never miss stories about

Remote Code Execution

Apache ActiveMQ Classic RCE Patched After AI-Assisted Discovery

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

Oracle Issues Emergency Patch for Critical RCE in Identity Manager and Web Services Manager

CISA Flags Cisco Firewall Zero-Day Exploited by Interlock, Sets March 22 Patch Deadline

CISA Flags SharePoint, Zimbra Flaws as Actively Exploited, Sets Rapid Federal Patching Deadlines

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

Exploit-Driven Hacks Overtake Credential Abuse in Cloud Breaches, Google Warns

Never miss stories about

Remote Code Execution