Everything BlueTeam Insider has reported about Remote Code Execution: 10 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity flaw in MindsDB lets authenticated attackers run arbitrary Python code via the OpenBBtable class, requiring immediate review of access controls.
Read more
A heap-based buffer overflow in FreeRDP’s audio channel allows malicious RDP clients to execute code on servers running versions prior to 3.32.1.
Read more
Unauthenticated attackers can chain an auth bypass with a report upload bug in Eptura Archibus to execute arbitrary commands on servers before version 2025.02.
Read more
A vulnerability in Broadcom’s 802.11 implementation allows attackers to execute code on routers without credentials, posing a persistent risk to unpatched devices.
Read more
Attackers execute OS commands on WeRSS instances through a template parameter flaw that bypasses security filters on public endpoints.
Read more
An authenticated user can execute arbitrary PHP code in OpenCATS versions prior to 0.10.0 by uploading a file that retains its original name.
Read more
Microsoft rates this Excel flaw as high severity, allowing network-based code execution in older Office versions before a specific security release.
Read more
Microsoft patches a high-severity flaw in .NET Framework and WPF runtimes that allows attackers to execute code via crafted pixel-shader bytecode on Windows systems.
Read more
Threat actors are exploiting two unpatched flaws in Ahsay Cloud Backup Server to gain SYSTEM-level control without credentials, deploying miners and web shells.
Read more
A critical vulnerability in Astron Agent allows authenticated users to execute arbitrary code as root, bypassing tenant isolation and accessing shared credentials.
Read more