Technology ❯ Cybersecurity ❯ Exploits

Remote Code Execution

CVE Vulnerabilities Gaming Security CVE-2025-20352 Commvault Call of Duty: WW2 System Access Zero-Click Attacks Shellcode Injection Unauthenticated Access Sandbox Escape Supply Chain Compromise OpenClaw CVE-2026-6973 Heap Buffer Overflow CVE-2026-42271 CVE-2026-2329 CVE-2025-31324 WordPress Vulnerabilities WebShells JavaScript Unpatched Systems Video Games Root System Rights Unauthorized Access CVE-2025-49704 CVE-2025-7775 Heap Overflow PHP Code Injection Hacking Arbitrary File Upload CVE-2025-42999 Metasploit

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Public proof-of-concept code and reports of live attacks have raised urgent risk for unpatched WordPress sites.

Critical Cisco Unified CM SSRF Is Being Exploited

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Google Posts Proof-of-Concept for Unpatched Chromium Flaw

Hackers Exploit Critical 'Nginx Rift' Bug as Fixes Ship

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Public Exploits Released for Critical Grandstream GXP1600 VoIP Phone Vulnerability

SmarterMail Admin-Reset Flaw Under Active Exploitation Days After Patch

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Cisco SNMP Zero‑Day Fueled ‘Operation Zero Disco’ Rootkit Attacks on Older Switches

Commvault Patches Four Flaws That Enable Pre‑Auth RCE Chains in On‑Prem Backup Suite

Public Exploit Chains SAP NetWeaver Flaws for Admin-Level RCE

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts

Call of Duty: WWII Offline on Game Pass PCs After Remote Code Exploit

Activision Pulls Call of Duty: WWII PC Game Pass Version Offline After Remote Code Exploit Emerges