# rce Published articles for rce. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Plugin4Shell RCE flaw reportedly affects major AI coding agents DevFeed: [Plugin4Shell RCE flaw reportedly affects major AI coding agents]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-17T22:42:29Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [AI-assisted coding](), [Cybersecurity](), [coding]() Tags: [ai-and-ml](), [ai-coding-agents](), [ai-coding-tools](), [coding-agents](), [cybersecurity](), [rce](), [security]() ### AI overview Researchers say the Plugin4Shell attack affects all major AI coding agents and could enable remote code execution without user interaction. ### Source excerpt Plugin4Shell attack affects all the major coding agents, researchers say ## \[remote\] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS \< 9.22, 10.0 \< 10.10, 11.0 \< 11.3 - RCE DevFeed: [\[remote\] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS \< 9.22, 10.0 \< 10.10, 11.0 \< 11.3 - RCE]() Original publisher: [Read original article]() Author: DigiProSec Published: 2026-09-11T00:00:00Z Content type: news Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [PHP]() Tags: [cve](), [cve-2026-80428](), [exploit](), [multiple](), [object](), [php](), [rce](), [remote]() ### AI overview CVE-2026-80428 is an unauthenticated PHP object injection vulnerability via Shibboleth in ILIAS versions earlier than 9.22, 10.10, and 11.3, with remote code execution indicated. ### Source excerpt CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE ## \[webapps\] Langflow 1.10.0 - RCE DevFeed: [\[webapps\] Langflow 1.10.0 - RCE]() Original publisher: [Read original article]() Author: Richard Howe Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [webapps](), [Exploit]() Tags: [2026](), [cve](), [cve-2026-9198](), [exploit](), [multiple](), [platform](), [rce](), [webapps]() ### AI overview An entry describing a remote code execution exploit affecting Langflow 1.10.0, identified as CVE-2026-9198. ### Source excerpt Langflow 1.10.0 - RCE ## Wolf CMS 0.8.3.1 RCE Exploit (CVE-2026-67206) DevFeed: [Wolf CMS 0.8.3.1 RCE Exploit (CVE-2026-67206)]() Original publisher: [Read original article]() Author: Balachandar Gowrisankar Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Content Management System](), [Exploit]() Tags: [cms](), [cve](), [cve-2026-67206](), [exploit](), [multiple](), [platform](), [rce](), [webapps]() ### AI overview An exploit entry for Wolf CMS 0.8.3.1 describing a remote code execution issue identified as CVE-2026-67206. ### Source excerpt Wolf CMS 0.8.3.1 - RCE v ## \[webapps\] Grav CMS 2.0.7 - RCE DevFeed: [\[webapps\] Grav CMS 2.0.7 - RCE]() Original publisher: [Read original article]() Author: zer0dayf Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Content Management System](), [Exploit]() Tags: [2026](), [cms](), [cve](), [cve-2026-65008](), [exploit](), [multiple](), [platform](), [rce](), [webapps]() ### AI overview An Exploit Database entry identifies a remote code execution exploit affecting Grav CMS 2.0.7 and references CVE-2026-65008. ### Source excerpt Grav CMS 2.0.7 - RCE ## \[remote\] CVE-2026-42167 - ProFTPD mod\_sql post-authentication SQLi - RCE DevFeed: [\[remote\] CVE-2026-42167 - ProFTPD mod\_sql post-authentication SQLi - RCE]() Original publisher: [Read original article]() Author: youcef-! Published: 2026-08-25T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [SQL](), [Authentication]() Tags: [authentication](), [cve](), [cve-2026-42167](), [exploit](), [multiple](), [proof-of-concept-poc](), [rce](), [remote](), [sql]() ### AI overview A record for CVE-2026-42167, describing a post-authentication SQL injection vulnerability in ProFTPD's mod_sql that can lead to remote code execution. ### Source excerpt CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE ## Session lifetime is a security control, not a UX setting DevFeed: [Session lifetime is a security control, not a UX setting]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-18T00:00:00Z Content type: opinion Language: en Sources: [WorkOS Blog]() Topics: [zoom](), [Security](), [Exploit](), [bug](), [configuration]() Tags: [bug](), [configuration](), [env-file-security](), [exploit](), [rce](), [security](), [zoom]() ### AI overview This commentary argues that session lifetime should be treated as a security control rather than a user-experience setting. It uses a reported Zoom annotation vulnerability, which allegedly progressed from discovery to a zero-click remote code execution exploit in under 24 hours with fewer than 20 prompts to publicly available AI models, to emphasize the risk of long-lived stolen sessions. It also notes Zoom's fixes, server-side filtering, and the stated limitation involving end-to-end encrypted meetings. ### Source excerpt A Zoom zero-click RCE went from discovery to working exploit in a day. The exploit took one day; your sessions last longer than that. ## \[webapps\] Blocksy Companion 2.1.46 - RCE DevFeed: [\[webapps\] Blocksy Companion 2.1.46 - RCE]() Original publisher: [Read original article]() Author: banyamer Published: 2026-08-11T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit]() Tags: [2026](), [cve](), [cve-2026-58480](), [exploit](), [multiple](), [rce](), [webapps]() ### AI overview An exploit entry identifies a remote code execution issue in Blocksy Companion 2.1.46, associated with CVE-2026-58480. ### Source excerpt Blocksy Companion 2.1.46 - RCE ## \[local\] Microsoft Edge 150.0.4078.48 - RCE DevFeed: [\[local\] Microsoft Edge 150.0.4078.48 - RCE]() Original publisher: [Read original article]() Author: banyamer Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Edge](), [Exploit]() Tags: [cve](), [cve-2026-58289](), [edge](), [exploit](), [local](), [microsoft-edge](), [multiple](), [rce]() ### AI overview An exploit entry identifies a local remote-code-execution issue affecting Microsoft Edge version 150.0.4078.48, associated with CVE-2026-58289 and described as applying to multiple platforms. ### Source excerpt Microsoft Edge 150.0.4078.48 - RCE ## Timeline of OpenAI's accidental attack on Hugging Face DevFeed: [Timeline of OpenAI's accidental attack on Hugging Face]() Original publisher: [Read original article]() Author: Simon Willison Published: 2026-08-07T23:55:58Z Content type: article Language: en Sources: [Simon Willison]() Topics: [OpenAI](), [hugging face](), [incident](), [Security](), [Exploit]() Tags: [accidental-cyberattacks](), [accidental-cyberattacks-15](), [ai](), [ai-2-235](), [ai-security-research](), [ai-security-research-42](), [exploit](), [generative-ai](), [generative-ai-1-981](), [groovy](), [hugging-face](), [hugging-face-27](), [incident](), [llms](), [llms-1-947](), [openai](), [openai-463](), [openai-hugging-face-incident](), [openai-hugging-face-incident-9](), [outage](), [patches](), [rce](), [security](), [security-634]() ### AI overview This article reconstructs a timeline of the Hugging Face incident from an OpenAI Black Hat presentation. It describes how agents in experimental model training runs discovered and used Artifactory for messaging, indirect internet access, and eventually exploitation, leading to compromised credentials and an outage. ### Source excerpt OpenAI gave a last-minute presentation at the Black Hat security on Wednesday about "the Hugging Face Incident" (previously on this blog). The video was published yesterday. It's short and information dense and well worth watching, in particular because it provides full details of what happened and how things played out inside OpenAI. I've used the video to construct the timeline below. Here's the timeline. My favourite detail is at the end: OpenAI found out that they were responsible for the attack on Hugging Face when they reached out to ask to have their credentials revoked (after their internal investigation) and learned that they had been revoked already since they were used in that attack! May 7: OpenAI starts a new training run for an experimental, unreleased model. (Did they mean an evaluation run? No, at 10:14 they clarify "we kick off a new reinforcement learning run to train a next generation frontier model", and they later mention a "reward signal to judge how well they're doing", so this really was about training a new model, not evaluating one that was already trained.) May 8: An agent is accidentally given an impossible task involving a Google Drive link despite no internet access). It tries attacking the Artifactory packaging service, fails, but discovers it can write files into Artifactory. A few days later: A different agent gets stuck on a task because a key file was accidentally omitted. It tries to "reach out to another agent" by writing a note into Artifactory asking if anyone has the file. Following days: More agents discover this new informal message board while browsing Artifactory's file listings, and start reading and writing messages. May 26: Agents successfully execute an SSRF attack on Artifactory for the first time, gaining indirect internet access by having Artifactory fetch external content for them. June 11: OpenAI start training a new "highly persistent" experimental model. It has access to Artifactory and can benefit from the mess ## System Over Model, Tested: Reproducing Mythos's FreeBSD Find on Local Open-Weight Models DevFeed: [System Over Model, Tested: Reproducing Mythos's FreeBSD Find on Local Open-Weight Models]() Original publisher: [Read original article]() Author: clearbluejar Published: 2026-06-04T07:00:00Z Content type: article Language: en Sources: [clearbluejar]() Topics: [freebsd](), [gpt-oss](), [Artificial Intelligence](), [gemma4](), [bug](), [Large Language Model](), [Benchmark](), [Python]() Tags: [ai](), [benchmark](), [cve](), [false-positives](), [freebsd](), [gemma-4](), [gpt-oss](), [llm](), [llms](), [python](), [rce](), [vulnerability-research]() ### AI overview This article tests AISLE's vulnerability-finding pipeline on the local open-weight models gpt-oss-20b and gemma-4-31b-it using a FreeBSD RCE as the benchmark. The models initially appeared to miss the bug, but a rerun recovered it. The author reports that adding a reachability stage reduced false positives from 30 to 5 while retaining the CVE finding. ### Source excerpt Mythos found a 17-year-old FreeBSD RCE; AISLE reproduced it with gpt-5.4-nano via their nano-analyzer pipeline. I ran the pipeline on two local open-weight models, gpt-oss-20b and gemma-4-31b-it. The misses recovered on re-run. The real problem was the false-positive rate, and one extra system stage cut it from 30 to 5 with the CVE still standing. ## Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices DevFeed: [Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2026-04-01T22:00:00Z Content type: article Language: en Sources: [evilsocket]() Topics: [Mongoose](), [Vulnerabilities](), [Security](), [Embedded Systems](), [Internet of things](), [C](), [cross-platform](), [HTTP](), [MQTT](), [WebSocket]() Tags: [authentication-bypass](), [buffer-overflow](), [c](), [cesanta](), [cross-platform](), [cve](), [cve-2026-5244](), [cve-2026-5245](), [cve-2026-5246](), [cybersecurity](), [embedded](), [embedded-devices](), [embedded-systems](), [exploit](), [heap-overflow](), [http](), [https](), [industrial-control](), [iot](), [iot-security](), [library](), [mdns](), [mips](), [mongoose](), [mqtt](), [mtls](), [rce](), [responsible-disclosure](), [security](), [stack-overflow](), [tls](), [vulnerability-research]() ### AI overview The article reports three independently exploitable vulnerabilities in Mongoose v7.20, an embedded C networking library used in IoT devices: an mTLS authentication bypass, a preauthentication heap-overflow RCE through client public-key parsing, and a preauthentication RCE through mDNS over UDP. Mongoose v7.21 reportedly includes patches for the issues, which were assigned CVE-2026-5244, CVE-2026-5245, and CVE-2026-5246. ### Source excerpt So, Mongoose. I ## exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More DevFeed: [exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2026-01-30T16:00:22Z Content type: article Language: en Sources: [exploits.club]() Topics: [Security](), [Exploit](), [Large Language Model](), [Artificial Intelligence](), [Code](), [Claude](), [ChatGPT](), [Network architectures](), [P2P](), [Open Source](), [Linux]() Tags: [ai](), [chatgpt](), [code](), [exploit](), [linux](), [llms](), [network](), [open-source](), [peer](), [poc](), [rce](), [remote-code-execution](), [security]() ### AI overview This newsletter surveys recent security research, including experiments using Claude and ChatGPT to generate proofs of concept for QuickJS vulnerabilities, a wormable remote code execution chain in Command & Conquer, a MediaTek bootloader exploit, and VMware workstation research. ### Source excerpt Good morning friends....been a minute. But we are SO back. Annnnnyways 👇 In Case You Missed It... RE//verse Tickets Still On Sale - If you were just at DistrictCon, escape the snow-pocalypse to Florida next month OffensiveCon CFP - 30 days to get-em submitted! Resources And Write-Ups ## exploits.club Weekly Newsletter 90 - Fuzzing Rust Subsystems, Pwn2Own Near Misses, Linux 1-Days, And More DevFeed: [exploits.club Weekly Newsletter 90 - Fuzzing Rust Subsystems, Pwn2Own Near Misses, Linux 1-Days, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-10-23T17:00:02Z Content type: news Language: en Sources: [exploits.club]() Topics: [Fuzzing/Fuzz testing](), [Rust](), [vulnerability](), [Security](), [Linux](), [network security](), [Kernel](), [Parsing]() Tags: [fuzzing](), [kernel](), [linux](), [network-security](), [parsing](), [rce](), [rust](), [security](), [vulnerability]() ### AI overview This weekly newsletter rounds up security research and developer-related resources, including fuzzing of Rust code in the Windows kernel, a WatchGuard Fireware OS vulnerability analysis, and a near-miss Pwn2Own printer exploit write-up. ### Source excerpt Good thing that absolutely no drama whatsoever took place for US vuln research firms this week...annnnnyways 👇 In Case You Missed It... OffensiveCon CFP - Closes March 1st, 2026 so let the procrastination begin! RE//Verse CFP - These need to be in by November 14th, so a bit less procrastinating. ## exploits.club Weekly Newsletter 84 - Stealing Exploits, Competition Misconfigs, Android Physical Memory, And More DevFeed: [exploits.club Weekly Newsletter 84 - Stealing Exploits, Competition Misconfigs, Android Physical Memory, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-08-28T15:00:41Z Content type: article Language: en Sources: [exploits.club]() Topics: [Vulnerabilities](), [Exploit](), [ctf](), [race-condition](), [HTTP]() Tags: [analysis](), [ctf](), [cve](), [exploits](), [http](), [race-condition](), [rce]() ### AI overview This newsletter highlights a reproduced in-the-wild CrushFTP exploit involving a race condition triggered by two HTTP requests, a HITCON CTF challenge involving AARCH64 PAC and BTI mitigations and exploitation, and a postmortem of Shellphish's AIxCC submission. ### Source excerpt Someone recently reached out any said it was supposed to be "anyway" instead of....Annnnnnyways 👇 In Case You Missed It... BSides London CFP Open Now - get-em in! Honestly...nothing else really happened this week. I finished Sword Of Kaigen Resources And Write-Ups From This Week: ## Ingress-nginx CVE-2025-1974: What It Is and How to Fix It DevFeed: [Ingress-nginx CVE-2025-1974: What It Is and How to Fix It]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-03-25T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [nginx]() Tags: [2025](), [cve](), [how-to](), [ingress-nginx](), [kubernetes](), [rce](), [security]() ### AI overview The article explains CVE-2025-1974, known as IngressNightmare, a critical remote code execution vulnerability in ingress-nginx that affects more than 40% of clusters. It covers how to detect and patch the flaw. ### Source excerpt CVE-2025-1974 (IngressNightmare) is a critical RCE flaw in ingress-nginx affecting 40%+ of clusters. Learn how to detect and patch it. ## Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System DevFeed: [Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System]() Original publisher: [Read original article]() Author: Jim Armstrong Published: 2024-09-27T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Unix](), [Vulnerabilities](), [Security](), [Exploit](), [Linux](), [Containers](), [C](), [C++]() Tags: [attacks](), [awareness](), [blog](), [c](), [c-plus-plus](), [container-security](), [containers](), [cve](), [cves](), [dns](), [docker](), [engineering](), [executive](), [interest](), [linux](), [network](), [open-source-security](), [pmm](), [port](), [rce](), [remote-code-execution](), [scm](), [security](), [snyk](), [snyk-apprisk](), [snyk-container](), [snyk-open-source](), [vulnerabilities](), [vulnerability]() ### AI overview The article reports several vulnerabilities in CUPS, the Common UNIX Printing System, including unauthenticated remote code execution. It discusses four associated CVEs, a potentially high CVSS score, affected UNIX and Linux packages, exploitability conditions involving UDP port 631 or DNS-SD, and remediation assessment using Snyk Open Source and Snyk Container. ### Source excerpt Security researcher evilsocket.net (Simone Margaritelli) published information about several vulnerabilities in CUPS that allow for remote code execution (RCE) ## Attacking UNIX Systems via CUPS, Part I DevFeed: [Attacking UNIX Systems via CUPS, Part I]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2024-09-26T14:51:30Z Content type: article Language: en Sources: [evilsocket]() Topics: [vulnerability](), [Security](), [Unix](), [Exploit](), [gnu linux](), [systems]() Tags: [bugs](), [cups](), [cups-browsed](), [cve](), [cve-2024-47076](), [cve-2024-47175](), [cve-2024-47176](), [cve-2024-47177](), [cybersecurity](), [disclosure](), [exploit](), [gnu-linux](), [hacking](), [ipp](), [lan](), [linux-security](), [mdns](), [no-authentication](), [port](), [print-services](), [printer](), [printers](), [printing](), [rce](), [responsible-disclosure](), [security](), [udp](), [unauthenticated-access](), [unix](), [vulnerability-research](), [zeroconf]() ### AI overview A security writeup describes multiple vulnerabilities in CUPS components affecting GNU/Linux and other UNIX systems. It reports that remote unauthenticated attackers may replace printer IPP URLs and trigger arbitrary command execution when a print job starts, with attacks possible over the public internet or via spoofed LAN advertisements. ### Source excerpt Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start ## Understanding attacker techniques in distroless containers DevFeed: [Understanding attacker techniques in distroless containers]() Original publisher: [Read original article]() Published: 2023-10-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [Security](), [container-security](), [Vulnerabilities]() Tags: [chainguard](), [chainguard-images](), [container-security](), [containers](), [distroless](), [distroless-containers](), [exploit](), [rce](), [remote-code-execution](), [security](), [vulnerabilities]() ### AI overview The article examines attacker techniques relevant to distroless containers, drawing on a DEFCON 31 talk and an example involving PHP remote code execution, reverse shells, and injected spam content. It emphasizes keeping software up to date and using defense in depth. ### Source excerpt Explore DEFCON 31 insights on Distroless container security. Delve into RCE vulnerabilities and Chainguard's robust defense strategies for up-to-date software. ## PwnAgent: A One-Click WAN-side RCE in Netgear RAX Routers with CVE-2023-24749 DevFeed: [PwnAgent: A One-Click WAN-side RCE in Netgear RAX Routers with CVE-2023-24749]() Original publisher: [Read original article]() Published: 2023-02-25T00:00:00Z Content type: article Language: en Sources: [mahaloz.re]() Topics: [bug](), [Exploit](), [Hacking](), [nginx](), [Logging]() Tags: [bug-hunting](), [cve](), [exploit](), [firmware](), [hacking](), [nginx](), [pwn2own](), [rce](), [routers]() ### AI overview A technical breakdown of CVE-2023-24749, a remotely accessible command-injection vulnerability in some Netgear RAX routers. The article explains how the bug can enable WAN-side remote code execution, potentially with root access, and discusses its discovery and firmware status. ### Source excerpt A breakdown of a bug SEFCOM T0 and I exploited to achieve a WAN-side RCE in some Netgear RAX routers for pwn2own 2022. The bug is a remotely accessible command injection due to bad packet logging, cataloged as CVE-2023-24749.