Curated security research, vulnerabilities, advisories and tools for practitioners.

#code-execution

Security coverage tagged code-execution.

1.

Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution

vulnerability | Critical | 2025-07-25 12:00 | CVE-2023-39631 | xbow.com | original ↗ | #rce | #vulnerability-research | #python

2.

Capturing the Flags of the Internet: Find 0-days in OSS and write scanners to detect them

vulnerability | 2025-01-08 00:00 | bughunters.google.com | original ↗ | #zero-day | #open-source | #google

3.

Fuzzing between the lines in popular barcode software

blog | 2024-10-31 13:00 | blog.trailofbits.com | original ↗ | #memory-safety | #denial-of-service | #fuzzing

4.

Hiding payloads in Java source code strings

research | 2024-01-24 12:27 | portswigger.net | original ↗ | #rce | #burp-suite | #java

5.

NSA Top Ten Cybersecurity Misconfigurations: An Active Directory Perspective (Part 3)

blog | 2024-01-23 14:53 | semperis.com | original ↗ | #active-directory | #cisa | #code-execution

6.

Attacking and defending JavaScript sandboxes

research | 2020-07-16 10:39 | portswigger.net | original ↗ | #web-security | #sandbox-escape | #proxy

7.

Abusing COM objects

blog | 2020-03-10 00:00 | 0xpat.github.io | original ↗ | #windows | #red-team | #enumeration