Do Son JPCERT/CC warns of critical flaws (CVSS 9.8) in SATO industrial label printers that allow unauthenticated remote attackers to upload malicious Lua scripts for root access.
rce
CISA issues an urgent warning about "ToolShell," a sophisticated exploit chain targeting SharePoint servers with multiple vulnerabilities to install webshells and steal crypto keys.
A critical PHP object injection flaw (CVE-2025-52709, CVSS 9.8) in Everest Forms allows RCE when an admin views form submissions on PHP versions below 7.1. Update to v3.2.3 immediately.
A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.
A critical vulnerability (CVE-2025-54594, CVSS 9.1) in React Native Bottom Tabs’ GitHub Actions allowed RCE and secret exfiltration. The flaw was patched, and no packages were affected.
Adobe released urgent patches for two critical flaws (CVE-2025-54253, -54254) in AEM Forms on JEE, allowing unauthenticated RCE & file reads, with public PoCs available.
A critical server-side template injection flaw (CVE-2024-23692) in Rejetto HFS 2.x is actively exploited to deploy ransomware and trojans at scale. Update or retire the service immediately.
Rockwell Automation's Arena Simulation software has three high-severity memory abuse flaws that could allow RCE or data leaks when opening a crafted file. Update immediately.
Trend Micro warns of two critical RCE flaws (CVE-2025-54948, -54987) in Apex One (on-prem) actively exploited in the wild. A fix tool is available, but disables remote agent installs.
Google's August 2025 Android Security Bulletin addresses a critical RCE flaw (CVE-2025-48530) in the core System component, which requires no user interaction for exploitation. Update now!
NVIDIA has patched multiple critical flaws (CVSS 9.8) in its Triton Inference Server. A vulnerability chain allows unauthenticated attackers to gain RCE and seize AI servers.
CERT/CC reveals critical flaws in Partner Software and Partner Web, including default admin credentials and XSS, that allow unauthenticated RCE on municipal and state systems.
A critical flaw (CVE-2025-54782, CVSS 9.4) in NestJS's devtools-integration package allows attackers to execute code on a developer's machine via a malicious website.
Cursor, the AI code editor, has patched two severe vulnerabilities (CVE-2025-54135, CVE-2025-54136) that allowed remote code execution via prompt injection and MCP trust bypass.
A critical heap buffer overflow (CVE-2025-54574, CVSS 9.3) in Squid allows unauthenticated RCE and information leakage when processing URN requests.
A critical flaw (CVE-2025-6000) in HashiCorp Vault allows privileged operators to achieve remote code execution on the host via misconfigured plugin directories.
A critical vulnerability (CVE-2025-46811, CVSS 9.8) in SUSE Manager allows unauthenticated remote command execution with root privileges on all managed Linux clients.
A critical RCE flaw (CVE-2025-5394, CVSS 9.8) in the Alone WordPress theme allows unauthenticated attackers to upload arbitrary files and gain full site control. Exploitation is confirmed in the wild.
A critical command injection flaw (CVE-2025-54418, CVSS 9.8) in CodeIgniter's ImageMagick handler allows remote code execution via malicious filenames or text.
A critical command injection flaw (CVE-2025-54416) in tj-actions/branch-names GitHub Action allows arbitrary code execution in workflows, affecting over 5,000 public repositories.
Salesforce patched eight critical flaws in Tableau Server, including RCE, database exposure, and SSRF vulnerabilities, urging users to update immediately.
A phishing attack compromised the 'is' npm library maintainer, leading to malicious versions being published with backdoors for remote code execution. Update immediately!