Google Patches Critical Wi-Fi and Audio Bugs in Android Handsets
Google updates its mobile OS, fixing ten critical bugs, including one remote code execution flaw. Continue reading Google Patches Critical Wi-Fi and Audio Bugs in Android Handsets
Category Archives: remote code execution
Critical, Unpatched Bugs Open GE Radiological Devices to Remote Code Execution
A CISA alert is flagging a critical default credentials issue that affects 100+ types of devices found in hospitals, from MRI machines to surgical imaging. Continue reading Critical, Unpatched Bugs Open GE Radiological Devices to Remote Code Execution
Critical MobileIron RCE Flaw Under Active Attack
Attackers are targeting the critical remote code-execution flaw to compromise systems in the healthcare, local government, logistics and legal sectors, among others. Continue reading Critical MobileIron RCE Flaw Under Active Attack
German COVID-19 Contact-Tracing Vulnerability Allowed RCE
Bug hunters at GitHub Security Labs help shore up German contact tracing app security, crediting open source collaboration. Continue reading German COVID-19 Contact-Tracing Vulnerability Allowed RCE
Widespread Scans Underway for RCE Bugs in WordPress Websites
WordPress websites using buggy Epsilon Framework themes are being hunted by hackers. Continue reading Widespread Scans Underway for RCE Bugs in WordPress Websites
Citrix SD-WAN Bugs Allow Remote Code Execution
The bugs tracked as CVE-2020–8271, CVE-2020–8272 and CVE-2020–8273 exist in the Citrix SD-WAN Center. Continue reading Citrix SD-WAN Bugs Allow Remote Code Execution
2 More Google Chrome Zero-Days Under Active Exploitation
Browser users are once again being asked to patch severe vulnerabilities that can lead to remote code execution. Continue reading 2 More Google Chrome Zero-Days Under Active Exploitation
Silver Peak SD-WAN Bugs Allow for Network Takeover
Three security vulnerabilities can be chained to enable unauthenticated remote code execution. Continue reading Silver Peak SD-WAN Bugs Allow for Network Takeover
Exploiting Groovy RCE
I’m trying to exploit groovy engine for RCE. However, the developer fixed by restricting the method calls with name ‘exec’, ‘execute’, ‘run’, ‘start’. Is there any bypass or alternative to these methods?
Initial Payload
def a= ‘wget https:… Continue reading Exploiting Groovy RCE
VMware Issues Updated Fix For Critical ESXi Flaw
A previous fix for the critical remote code execution bug was “incomplete,” according to VMware. Continue reading VMware Issues Updated Fix For Critical ESXi Flaw