RCE - CVE CyberSecurity Database News (Page 41)

Nov 29, 2024 RCE API Exploit

CVE-2024-11482 - ESM 11.6.10 Unauthenticated Remote Code Execution via Snowservice API

A critical vulnerability tracked as CVE-2024-11482 has been discovered in ESM (Enterprise Service Manager) version 11.6.10, a widely-used platform in enterprise environments. This

Nov 28, 2024 RCE API Apache

CVE-2024-52338 - Critical RCE Vulnerability in Apache Arrow R Package via Untrusted Data Deserialization

A critical security vulnerability, tracked as CVE-2024-52338, has been discovered in the Apache Arrow R package. This vulnerability allows arbitrary code execution (RCE) due to

Nov 28, 2024 RCE WordPress Exploit PHP

CVE-2024-8672 - Remote Code Execution in Widget Options WordPress Plugin — Full Exploit Analysis & Remediation Notes

--- Overview *CVE-2024-8672* is a critical security vulnerability affecting The Widget Options – The #1 WordPress Widget & Block Control Plugin (hereafter "Widget Options"

Nov 28, 2024 RCE WordPress PHP

CVE-2024-11082 - How a WordPress Plugin Put Sites at Risk of Arbitrary File Upload & Remote Code Execution

If you run a WordPress website and you use the Tumult Hype Animations plugin, this post is crucial for you. A critical vulnerability—CVE-2024-11082—has

Nov 27, 2024 RCE API Exploit

CVE-2024-42331 - Understanding the Use-After-Free Bug in Zabbix’s Duktape Integration

On June 2024, a critical security vulnerability was disclosed in Zabbix, an enterprise-grade open source monitoring tool. This bug, CVE-2024-42331, centers on a use-after-free error