DEV Community

#rce

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Two Accepts and One Reject: How Bricksforge CVE-2026-85097 Turned a Form Upload into a Webshell

Two Accepts and One Reject: How Bricksforge CVE-2026-85097 Turned a Form Upload into a Webshell

Comments
3 min read
MoviePilot let the model decide whether a command was dangerous

MoviePilot let the model decide whether a command was dangerous

Comments
4 min read
PHP2Shell: Two Critical PHP RCEs (CVSS 9.2) Leaked a Day Early — Check Your Version and Patch Today

PHP2Shell: Two Critical PHP RCEs (CVSS 9.2) Leaked a Day Early — Check Your Version and Patch Today

Comments
10 min read
PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36

PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36

Comments
6 min read
Leaked PHP Vulnerabilities (CVE-2026-109618/19) Pose RCE Risk: Urgent Patching Required Across All Installations

Leaked PHP Vulnerabilities (CVE-2026-109618/19) Pose RCE Risk: Urgent Patching Required Across All Installations

Comments
10 min read
PHP2Shell: Mitigating the Critical PHP RCE Before the Patch

PHP2Shell: Mitigating the Critical PHP RCE Before the Patch

1
Comments
3 min read
CVE-2026-87902 Under Active Exploitation: 64 Honeypot Attempts and a GitHub-Hosted Webshell

CVE-2026-87902 Under Active Exploitation: 64 Honeypot Attempts and a GitHub-Hosted Webshell

Comments
3 min read
Langflow pipes commands into bash

Langflow pipes commands into bash

Comments
3 min read
CVE-2026-87902 Patch Matrix: Which WordPress Branches Received the Backport

CVE-2026-87902 Patch Matrix: Which WordPress Branches Received the Backport

2
Comments
3 min read
21,899 Exposed Exchange Servers and a Certified Pre-Auth Route to SYSTEM

21,899 Exposed Exchange Servers and a Certified Pre-Auth Route to SYSTEM

Comments
3 min read
Langflow CVE-2026-0768: An Unauthenticated Route to Code Execution in an AI Workflow Builder

Langflow CVE-2026-0768: An Unauthenticated Route to Code Execution in an AI Workflow Builder

Comments
3 min read
PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise

PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise

1
Comments
11 min read
php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619

php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619

7
Comments 1
5 min read
Finding WordPress Click2Shell Exposure Starts With Knowing Where WordPress Runs

Finding WordPress Click2Shell Exposure Starts With Knowing Where WordPress Runs

Comments
2 min read
Drupal patches two critical remote code execution flaws

Drupal patches two critical remote code execution flaws

Comments 1
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.