Everything Circuit Observer has reported about Remote Code Execution: 7 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in LMCache allows attackers to run code on servers without authentication, impacting versions from 0.3.9 up to 0.5.5 in multi-node setups.
A flaw in e107 CMS install scripts allows attackers to take full control of servers. Version 2.3.7 patches the issue for older sites.
A double free vulnerability in Microsoft Outlook enables unauthorized attackers to run code remotely, rated critical with a CVSS score of 9.8.
A severe flaw in the Microsoft PostScript Printer Driver allows remote attackers to execute code without authorization, according to security advisories.
A critical vulnerability in Adobe ColdFusion allows remote code execution without user interaction, affecting versions up to 2025.0.13 and 2023.0.25.
A CVSS 9.4 vulnerability in OpenSpug Spug enables remote attackers to execute OS commands through the file transfer component, with no vendor fix confirmed.
Remote code execution often hides in routine system calls rather than obvious error messages, requiring deep inspection of process trees and memory states.