#execution


GitLab warns of max severity code execution vulnerability

Oct 12, 2026 // 16:17

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on […]

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

Oct 2, 2026 // 23:15

A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, […]

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Sep 30, 2026 // 11:10

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation […]

Hackers start exploiting critical WordPress flaw for code execution

Sep 24, 2026 // 23:38

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when […]

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Sep 24, 2026 // 23:38

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you […]

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Sep 23, 2026 // 10:07

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other […]

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Sep 22, 2026 // 23:58

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from […]

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Sep 16, 2026 // 19:00

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in […]

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Sep 15, 2026 // 11:31

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The […]

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Sep 9, 2026 // 12:19

Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned […]

1 2 3 … 10 Next