Tag: Remote Code Execution
An unreleased Claude model wrote a working root exploit for Linux
Anthropic's research build chained a use-after-free in Multipath TCP into zero-click remote root in 53 minutes, and Ubuntu and Red…
Ruby patched three regex bugs behind GitLab’s four critical CVEs
Any application that compiles a regular expression from untrusted input is exposed, not just GitLab.
Linux SMB patch lagged two 9.0 flaws already public
KSMBD remote code execution bugs were posted to open mailing lists with no patches, and one needs no login at…
A filename, not an image, trips Pillow into running commands
Pillow 13.0.0 closes a Ghostscript path where the name of an uploaded EPS file decides whether a server runs someone…
A regex overflow puts every GitLab version back in scope
CVE-2026-110264 scores 10.0, reaches back to 2014 and lands one patch above the update admins applied nine days ago.
Node’s bundled Brotli decoder takes a hostile input path
Node bundled a Google library with an out-of-bounds write, and version 20 and older will never see the fix.
A null byte turns a FortiSIEM path bug into root
Horizon3.ai has published working exploit code for an unauthenticated FortiSIEM flaw rated 9.4.
Drupal ships five fixes and warns exploit code may arrive in days
Two critical Drupal bugs need contributed modules to be dangerous, and one route needs no login at all.