#Rce

Ruby 4.0's New RCE Chain Proves Patching Gadgets Won't Save You

A fresh universal Marshal.load chain works back to Ruby 3.3 — and the real lesson is architectural, not a version bump.

Article · 2w ago0

Ruby's Marshal.load Just Became Unpatchable RCE

A new universal gadget chain anchors on Time and Hash internals the maintainers can't remove without breaking the language.

Article · 2w ago4

One Link in a Commit Message Owns Your Editor

AISLE found the same click-to-execute bug in VS Code, Cursor, and Antigravity, proving the fork monoculture ships shared risk.

Article · 3w ago1

AI turned a routine SQL bug into a WordPress catastrophe

The scary part of wp2shell isn't discovery. It's how cheaply a model chained the flaw to full RCE.

Article · 1mo ago1

Cursor's Unpatched Git.exe RCE Still Hits Windows Devs

Six months after report, opening a poisoned Windows repo still runs attacker code with no prompt.

Article · 1mo ago1

Motorola MR2600 LAN RCE via Firmware Path

Two broken auth checks plus unsigned SEAMA images let any LAN host flash and own the gateway.

Article · 1mo ago0

SQL Injection Still Chains to RCE on Apple

A single unparameterized CFML query behind a JSON API turned a travel portal into remote code execution.

Article · 1mo ago2

Critical Ivanti Sentry RCE Under Active Exploitation

A maximum-severity unauthenticated command injection vulnerability in Ivanti Sentry is being actively targeted following a public exploit release.

News · 2mos ago0

How an Insecure Update Flow Exposed AMD Systems to RCE

A trivial MITM vulnerability in AMD's AutoUpdate tool highlights the risks of ignoring transport security in software updates.

Article · 2mos ago0