Technology ❯ Cybersecurity ❯ Exploits

Remote Code Execution

CVE-2025-20352 Gaming Security CVE Vulnerabilities Metasploit Call of Duty: WW2 System Access Shellcode Injection Zero-Click Attacks Sandbox Escape Commvault

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

The move compels federal agencies to remediate the bug by June 22 and heightens urgency for organizations to patch or apply mitigations.

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Google Posts Proof-of-Concept for Unpatched Chromium Flaw

Hackers Exploit Critical 'Nginx Rift' Bug as Fixes Ship

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Public Exploits Released for Critical Grandstream GXP1600 VoIP Phone Vulnerability

SmarterMail Admin-Reset Flaw Under Active Exploitation Days After Patch

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Cisco SNMP Zero‑Day Fueled ‘Operation Zero Disco’ Rootkit Attacks on Older Switches

Commvault Patches Four Flaws That Enable Pre‑Auth RCE Chains in On‑Prem Backup Suite

Public Exploit Chains SAP NetWeaver Flaws for Admin-Level RCE

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts

Call of Duty: WWII Offline on Game Pass PCs After Remote Code Exploit

Activision Pulls Call of Duty: WWII PC Game Pass Version Offline After Remote Code Exploit Emerges

Critical OpenSSH Vulnerability Puts Millions of Linux Servers at Risk