Tag

RCE

6 stories

TightVNC Viewer Pre-Auth RCE: PoC Shows Remote Code Execution Risk

A newly disclosed vulnerability in the TightVNC Viewer allows attackers to execute code on Windows machines before a password prompt appears. Research credited to SeongJoon Cho of SSD Labs Korea includes proof-of-concept exploit code targeting TightVNC 2.8.88 x64. The flaw affects the viewer component and can be triggered when a viewer connects to a malicious server or when the viewer is reachable in Listening Mode. How the bug works The…

Saugata DattaNov 2, 20263 min read18

Cybersecurity

Inside the 60,471 Attempts: What the WordPress 7.1.4 Patch Actually Stopped

Hackers flooded WordPress sites with tens of thousands of requests targeting a Core remote code execution (RCE) weakness in the hours after a security patch was released. Wordfence’s threat intelligence recorded 60,471 blocked attempts in a 24‑hour window — a clear signal that attackers were actively probing the update process, even though the majority of those requests were firewall‑blocked and not confirmed compromises. What attackers were trying to exploit The…

Saugata DattaOct 31, 20263 min read25

Cybersecurity

Node2Shell: Crafted Brotli Data Lets Code Run in an Official Node.js Build — What Operators Need to Know

Imperva researchers have demonstrated a proof-of-concept exploit—dubbed “Node2Shell”—that uses crafted Brotli-compressed data to achieve remote code execution (RCE) against an official Node.js 24.22.0 build for Linux arm64. The issue, tracked as CVE-2026-111497, was disclosed by Node.js and patched on October 21, 2026. While the demonstration did not work reliably on every attempt and targeted a specific build and architecture, it highlights a real risk for services that decode untrusted Brotli…

Saugata DattaOct 23, 20265 min read143

Cybersecurity

PHP’s New Warning: Narrow Unpatched RCE Path After PHP2Shell Fixes

PHP released a short advisory on October 23 warning of a separate, unlikely path that could let an attacker run code on a web server — just two days after emergency fixes for the critical PHP2Shell flaws. While the newly disclosed issue (CVE-2026-115560) is not being treated as an emergency, administrators should understand the configuration that creates the risk, confirm whether their apps are affected, and apply the recommended mitigation…

Saugata DattaOct 23, 20264 min read145

Cybersecurity

WordPress Imagick RCE (CVE-2026-65640): What Site Owners Need to Know

WordPress has just released a security-focused update — version 7.0.4 — to close a remote code execution flaw that can be triggered when images are processed with the Imagick extension and Ghostscript. The vulnerability, tracked as CVE-2026-65640 and described in GHSA-8vr3-7mxf-gx8w, was responsibly disclosed by researchers at pwn.ai. While exploitation requires an authenticated Author-level account or higher, the bug’s mechanics mean multi-author sites, membership platforms, and installations with broad contributor…

Saugata DattaAug 13, 20264 min read242

Artificial Intelligence

How the Google Gemini CLI Flaw Turned CI/CD Pipelines into Remote Code Execution Risk

A critical remote code execution (RCE) vulnerability in the Google Gemini CLI and its associated GitHub Action exposed a startling weakness in how AI tooling can interact with developer infrastructure. Rated with the maximum CVSS score of 10.0, the bug allowed unprivileged external actors to execute commands on the machines running CI/CD workflows. This wasn’t a prompt-injection trick against a model; it was an infrastructure-level failure that allowed malicious configuration…

Saugata DattaApr 30, 20264 min read362

TightVNC Viewer Pre-Auth RCE: PoC Shows Remote Code Execution Risk

Inside the 60,471 Attempts: What the WordPress 7.1.4 Patch Actually Stopped

Node2Shell: Crafted Brotli Data Lets Code Run in an Official Node.js Build — What Operators Need to Know

PHP’s New Warning: Narrow Unpatched RCE Path After PHP2Shell Fixes

WordPress Imagick RCE (CVE-2026-65640): What Site Owners Need to Know

How the Google Gemini CLI Flaw Turned CI/CD Pipelines into Remote Code Execution Risk

Free Tools: IP, DNS, SSL