Everything NetSec Observer has reported about Remote Code Execution: 9 stories, newest first. Part of our Vulnerabilities coverage.
Researchers found that the XWorm RAT control panel allows attackers to overwrite system files and run code without logging in, using data found in infected clients.
Misconfigured parsers and outdated libraries allow attackers to execute arbitrary code on your server without needing valid credentials.
Admins can force the system to clone attacker-controlled Git repos, replacing core files and executing arbitrary PHP code on the server.
Microsoft SQL Server versions through 2025 contain a high-severity deserialization flaw that lets authorized users run remote code.
A critical remote code execution vulnerability in the Windows iSCSI service allows unauthorized network attackers to execute arbitrary code without prior access.
A critical heap-based buffer overflow in the Microsoft PostScript Printer Driver allows unauthorized attackers to run code over a network.
watchTowr Labs revealed a sequence of flaws in PaperCut software that allows attackers to run code remotely without needing user login credentials.
A critical remote code execution vulnerability in OpenSpug's file transfer module allows unauthenticated attackers to inject operating system commands.
A commented-out security check in the 3D Product Configurator plugin allows attackers to execute arbitrary code on WordPress servers without logging in.