GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

Unauthenticated remote code execution in OpenCode(cy.md)

406 points by CyberShadow 9 months ago | 135 comments

Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.

Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)(github.com)

23 points by ringzeropirate 4 months ago | 12 comments

CVE-2023-40547 – avoid incorrectly trusting HTTP headers(github.com)

239 points by DyslexicAtheist 2 years ago | 103 comments

Claude wrote a full FreeBSD remote kernel RCE with root shell(github.com)

251 points by ishqdehlvi 6 months ago | 97 comments

RediShell: Critical remote code execution vulnerability in Redis(wiz.io)

111 points by mihau 1 year ago | 45 comments

Unauthenticated remote code execution in OpenCode(cy.md)

406 points by CyberShadow 9 months ago | 135 comments

Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.

Notepad++ hijacked by state-sponsored actors(notepad-plus-plus.org)

605 points by mysterydip 8 months ago | 323 comments

Notepad++ news post explaining that its update infrastructure was compromised at the shared hosting provider by state-sponsored attackers who redirected update traffic.

Visual Studio Code is designed to fracture (2022)(ghuntley.com)

354 points by ghuntley 2 years ago | 260 comments

Geoffrey Huntley's 2022 essay arguing that Microsoft designed Visual Studio Code's licensing and extension ecosystem so that open-source forks fracture from proprietary features.

NotepadNext – a cross-platform reimplementation of Notepad++(github.com)

427 points by Brajeshwar 2 years ago | 263 comments

GitHub repository for NotepadNext, a GPL-licensed cross-platform reimplementation of the Notepad++ text editor built with Qt.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

OpenClaw privilege escalation vulnerability(nvd.nist.gov)

493 points by kykeonaut 6 months ago | 232 comments

NVD entry for CVE-2026-33579, a privilege escalation vulnerability in OpenClaw; the captured screenshot shows a Reddit network-policy block page instead.