121. Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution vulnerability | Critical | 2025-07-25 12:00 | CVE-2023-39631 | xbow.com | original ↗ | #rce | #vulnerability-research | #python
122. SharePoint ToolShell – One Request PreAuth RCE Chain vulnerability | 2025-07-24 10:39 | blog.viettelcybersecurity.com | original ↗ | #rce | #deserialization | #pre-auth
123. ToolShell - A Critical SharePoint Vulnerability Chain under Active Exploitation research | 2025-07-24 10:37 | CVE-2025-49704 | blog.viettelcybersecurity.com | original ↗ | #rce
124. SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know vulnerability | 2025-07-21 17:42 | wiz.io | original ↗ | #rce | #microsoft | #sharepoint
125. SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization vulnerability | 2025-07-16 09:42 | CVE-2024-38018 | blog.viettelcybersecurity.com | original ↗ | #rce | #deserialization | #sharepoint
126. Critical RCE Vulnerability in mcp-remote: CVE-2025-6514 Threatens LLM Clients research | 2025-07-09 13:00 | CVE-2025-6514 | jfrog.com | original ↗ | #ai-security | #rce | #mcp
127. Exposed JDWP Exploited in the Wild: What Happens When Debug Ports Are Left Open blog | 2025-07-02 15:00 | wiz.io | original ↗ | #rce | #teamcity | #misconfiguration
128. Splitting the email atom: exploiting parsers to bypass access controls research | 2025-06-27 13:49 | portswigger.net | original ↗ | #rce | #email-security | #unicode
129. Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3 blog | 2025-06-26 00:00 | bishopfox.com | original ↗ | #rce | #vulnerability | #hardcoded-credentials
130. Hacker spotlight: Ruikai Peng blog | 2025-05-28 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #black-hat
131. Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild vulnerability | 2025-05-20 18:13 | wiz.io | original ↗ | #rce | #exploitation | #vulnerability
132. ‘Airborne’ AirPlay attacks, netting $64k from deleted files, triaging AI slop – ethical hacker news roundup blog | 2025-05-16 13:00 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #rce
133. Vibe Hacking: Finding Auth Bypass and RCE in Open Game Panel research | 2025-04-30 05:52 | CVE-2025-15586 | projectblack.io | original ↗ | #rce | #authentication-bypass | #open-game-panel
134. ZendTo NDay Vulnerability Hunting - Unauthenticated RCE in v5.24-3 <= v6.10-4 vulnerability | 2025-03-30 23:22 | projectblack.io | original ↗ | #cloud | #rce | #unauthenticated
135. Hide and Fail: Obfuscated Malware, Empty Payloads, and npm Shenanigans blog | 2025-04-03 00:00 | aikido.dev | original ↗ | #rce | #supply-chain | #malware
136. Remote code execution (RCE) 101 vulnerability | 2025-03-26 12:00 | bugcrowd.com | original ↗ | #rce | #web-security | #ssti
137. IngressNightmare: CVE-2025-1974 - 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX vulnerability | 2025-03-24 21:45 | CVE-2025-1097 | wiz.io | original ↗ | #cloud | #rce | #cloud-security
138. Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere blog | 2025-03-24 09:06 | yeswehack.com | original ↗ | #rce | #exploitation | #template-injection
139. Tomcat CVE-2025-24813: What You Need to Know vulnerability | 2025-03-18 00:00 | CVE-2025-24813 | bishopfox.com | original ↗ | #rce | #deserialization | #vulnerability
140. Pwn everything Bounce everywhere all at once (part 2) research | 2025-02-25 23:00 | blog.quarkslab.com | original ↗ | #rce | #php | #sql-injection
141. Pwn everything Bounce everywhere all at once (part 1) research | 2025-02-24 23:00 | blog.quarkslab.com | original ↗ | #rce | #php | #red-team
142. LDAPNightmare Explained vulnerability | 2025-01-13 21:04 | CVE-2024-49113 | semperis.com | original ↗ | #rce | #denial-of-service | #windows
143. Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603) vulnerability | 2025-01-11 17:23 | CVE-2024-50603 | wiz.io | original ↗ | #cloud | #rce | #aws
144. CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild vulnerability | 2025-01-09 14:23 | wiz.io | original ↗ | #rce | #vulnerability | #vpn
145. Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405) tool | 2025-01-03 15:00 | CVE-2024-43405 | wiz.io | original ↗ | #rce | #open-source | #vulnerability
146. Under the Radar: Exploring Spring Boot Actuator Misconfigurations blog | 2024-12-16 14:00 | wiz.io | original ↗ | #rce | #cloud-security | #java
147. Wiz observes exploitation in the wild of PAN-OS vulnerabilities blog | 2024-11-22 13:50 | wiz.io | original ↗ | #cloud | #rce | #exploitation
148. Making Sense of Kubernetes Initial Access Vectors Part 2 - Data Plane blog | 2024-11-13 17:04 | wiz.io | original ↗ | #rce | #cloud-security | #kubernetes
149. Dojo challenge #36 - Shell Escape winners and writeup blog | 2024-11-08 09:00 | yeswehack.com | original ↗ | #rce | #access-control | #ctf
150. Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen vulnerability | 2024-10-17 20:36 | hackerone.com | original ↗ | #rce | #case-study | #hackerone