6 stories tagged rce, newest first.
154 points by cowlevel | 85 comments
A Nitter mirror of an Aikido Security post about http2shell, an HTTP/2-related remote code execution vulnerability affecting Node, Python and others; the page shows only a bot-check link.
353 points by mrkd | 165 comments
pwn.watch is a live feed of ongoing security incidents and CVEs, listing affected software, patch status, fixed versions, and source advisories.
226 points by vntok | 124 comments
GitHub security advisory for a critical WordPress unauthenticated path traversal in page-template resolution leading to conditional RCE, listing affected and patched versions.
559 points by rayhaanj | 214 comments
GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.
352 points by udev4096 | 173 comments
Security blog post disclosing that qBittorrent's DownloadManager ignored SSL certificate errors for 14 years, enabling remote code execution, fixed in version 5.0.1.
1545 points by notmine1337 | 346 comments
watchTowr Labs blog post describing how registering an expired WHOIS server domain for $20 let them take over .mobi WHOIS and reach RCE paths.