Tag: Remote Code Execution
Diffusers bug trio bypasses Hugging Face code trust guard
Three flaws in Hugging Face's Diffusers library let crafted model repositories run arbitrary code despite trust_remote_code protections.
JetBrains patches critical TeamCity bug allowing unauthenticated server takeover
CI/CD platforms have become prime targets for attackers seeking supply chain access, and JetBrains’ latest security advisory underscores the risk.
Critical 7-zip vulnerability allows code execution via XZ archives
A heap buffer overflow in 7-Zip's XZ decompression lets attackers execute code when victims open crafted archive files.
Critical Nginx bug CVE-2026-42533 allows remote code execution via HTTP
F5 patched a critical Nginx heap buffer overflow that lets unauthenticated attackers crash workers or achieve remote code execution.
Progress orders ShareFile customers to shut down storage zone servers
Progress Software told ShareFile customers to power down on-premises Storage Zone Controllers over an undisclosed security threat.
CISA adds two Joomla extension flaws to known exploited vulnerabilities catalog
CISA added iCagenda and Balbooa Forms Joomla extension flaws to its KEV catalog, citing active exploitation and remote code execution…
Authenticated Remote Code Execution Risk in Splunk Enterprise
An unauthenticated attacker can exploit a missing authentication control in Splunk Enterprise's PostgreSQL sidecar to write arbitrary files and execute…
Chain of Vulnerabilities in LangGraph Opens Self-Hosted AI Systems to Takeover
A trio of patched vulnerabilities in LangGraph's checkpoint system can be chained through SQL injection and unsafe deserialization to execute…