Curated security research, vulnerabilities, advisories and tools for practitioners.

#code-execution

Security coverage tagged code-execution.

1.

7 Ways to Execute Command on Azure Virtual Machines & Virtual Machine Scale Sets

blog | 2026-03-04 00:00 | netspi.com | Original ↗ | .md | #cloud | #powershell | #azure

2.

Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution

vulnerability | Critical | 2025-07-25 12:00 | CVE-2023-39631 | xbow.com | Original ↗ | .md | #rce | #vulnerability-research | #python

3.

Capturing the Flags of the Internet: Find 0-days in OSS and write scanners to detect them

vulnerability | 2025-01-08 00:00 | bughunters.google.com | Original ↗ | .md | #zero-day | #open-source | #google

4.

Hijacking Azure Machine Learning Notebooks (via Storage Accounts)

blog | 2025-01-08 00:00 | netspi.com | Original ↗ | .md | #ai-security | #cloud | #privilege-escalation

5.

CVE-2024-10382: Arbitrary code execution in Android Auto and various apps

vulnerability | 2024-12-18 00:00 | CVE-2024-10382 | calif.io | Original ↗ | .md | #vulnerability-research | #android | #automotive

6.

Fuzzing between the lines in popular barcode software

blog | 2024-10-31 13:00 | blog.trailofbits.com | Original ↗ | .md | #memory-safety | #denial-of-service | #fuzzing

7.

Hiding payloads in Java source code strings

research | 2024-01-24 12:27 | portswigger.net | Original ↗ | .md | #rce | #burp-suite | #java

8.

NSA Top Ten Cybersecurity Misconfigurations: An Active Directory Perspective (Part 3)

blog | 2024-01-23 14:53 | semperis.com | Original ↗ | .md | #active-directory | #cisa | #code-execution

9.

mast1c0re: Part 2 – Arbitrary PS2 code execution

research | 2023-02-10 14:33 | mccaulay.co.uk | Original ↗ | .md | #vulnerability-research | #exploitation | #exploit

10.

Attacking and defending JavaScript sandboxes

research | 2020-07-16 10:39 | portswigger.net | Original ↗ | .md | #web-security | #sandbox-escape | #proxy

11.

Abusing COM objects

blog | 2020-03-10 00:00 | 0xpat.github.io | Original ↗ | .md | #windows | #red-team | #enumeration

12.

Adaptive DLL Hijacking

blog | 2020-02-19 00:00 | netspi.com | Original ↗ | .md | #windows | #red-team | #dll-hijacking

13.

Discovering a zero day and getting code execution on Mozilla's AWS Network

research | 2019-03-19 00:00 | slcyber.io | Original ↗ | .md | #cloud | #zero-day | #vulnerability-research

14.

The Tale of SettingContent-ms Files

blog | 2018-06-11 07:00 | specterops.io | Original ↗ | .md | #windows | #code-execution | #specterops