Tag: RCE
Plugin4Shell breaks plugin pinning across four AI coding agents
A shared design weakness in the major coding agents lets hostile plugins run with the same reach as the developer…
Attackers hammer Orkes Conductor through an unauthenticated RCE hole
A workflow engine that many teams expose to the internet has been under active exploitation for a month, with no…
Super Forms upload bug draws 250,000 blocked exploit tries
Wordfence counts 440,000 exploit attempts against Super Forms and Elementor Pro file-upload flaws.
PostGREShell bug turns lowly PostgreSQL backup roles into superusers
A 12-year-old PostgreSQL replication bug lets low-privilege backup accounts load code and become superusers.
Cisco Nexus 9000 switches leave two TCP ports open to root access
A critical Nexus 9000 flaw leaves two TCP ports reachable and hands unauthenticated attackers root privileges.
Exploited Rails flaw lets attackers read secrets and run code
VulnCheck says KindaRails2Shell is under attack roughly a month after patches shipped.
Patch rush for five WordPress add-ons after takeover-grade flaws
Five critical flaws across WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP open sites to takeover and code execution.
Urgent Next.js updates close AVIF and Windows RCE paths
Vercel patches two critical unauthenticated RCE bugs in the Next.js framework.