Exploitation Attempts Surge Against WordPress Plugin Vulnerabilities
Recent findings reveal over 440,000 exploit attempts targeting critical vulnerabilities in WordPress plugins Super Forms and Elementor Pro.
Tag remote code execution
IBM’s Langflow AI Platform Faces Active Exploitation Due to Critical Vulnerability
A serious vulnerability in IBM's Langflow AI platform allows unauthorized remote code execution, prompting urgent action for affected users.
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
A public exploit has been released for a previously patched remote code execution vulnerability in vBulletin, affecting versions 6.2.1 and earlier, as well as 6.1.6 and earlier.
AutoJack Attack Exploits AI Agent for Remote Code Execution
A newly identified exploit chain, named AutoJack, allows attackers to leverage an AI browsing agent for unauthorized code execution on local machines. This vulnerability affects specific pre-release versions of Microsoft's AutoGen Studio.
ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability
The ShinyHunters group has exploited a critical zero-day vulnerability in Oracle PeopleSoft, impacting numerous universities and potentially exposing sensitive data.
Critical Vulnerability in Hugging Face’s LeRobot Exposes Remote Code Execution Risk
A serious security flaw in Hugging Face's LeRobot platform could allow unauthenticated attackers to execute arbitrary code remotely, raising significant security concerns.
Critical Vulnerability Discovered in SGLang Allows Remote Code Execution
A severe security flaw in SGLang, identified as CVE-2026-5760, poses significant risks of remote code execution through malicious model files.
CUPS Server Vulnerabilities Enable Remote Code Execution
Recent findings reveal two vulnerabilities in the CUPS printing system that could allow unauthenticated remote code execution and root access.
Microsoft Uncovers Cookie-Controlled PHP Web Shells on Linux Servers
Microsoft's findings reveal a new method where threat actors utilize HTTP cookies to control PHP-based web shells, enabling remote code execution on Linux servers.
CISA Includes CVE-2025-53521 in KEV Due to Active Exploitation of F5 BIG-IP APM
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical vulnerability affecting F5 BIG-IP APM to its Known Exploited Vulnerabilities catalog, following evidence of active exploitation.
