RCE - CVE CyberSecurity Database News (Page 6)

Sep 19, 2025 RCE Exploit PHP

CVE-2025-48703 - Unauthenticated Remote Code Execution in CWP (Control Web Panel) File Manager – Full Exploit Guide

--- Published: June 2024 Vulnerable Software: CWP (Control Web Panel, formerly CentOS Web Panel) < .9.8.1205 Vulnerability Type: Remote Code Execution (RCE) Attack

Sep 4, 2025 RCE Exploit

CVE-2025-48530 - Understanding the OOB Vulnerability Leading to Remote Code Execution

Security vulnerabilities don’t wait for anyone. CVE-2025-48530 is one such recent critical bug that affects several software versions, caused by an incorrect bounds check

Aug 28, 2025 RCE API Exploit SQL PHP

CVE-2025-57819 - Exploiting Unauthenticated Admin Access in FreePBX (Endpoint 15, 16, 17) – Details & Practical Attack Scenarios

FreePBX is a popular open-source VoIP system, widely used for managing voice communications in organizations. It offers a web-based interface for administering PBX functionality. But

Jun 2, 2025 RCE Exploit PHP

CVE-2025-49113 - Remote Code Execution in Roundcube Webmail via Authenticated PHP Object Deserialization

CVE-2025-49113 is a critical vulnerability affecting Roundcube Webmail (before version 1.5.10 and 1.6.x before 1.6.11). If you’re running

May 21, 2025 RCE Exploit

CVE-2025-34027 - Remote Code Execution via Authentication Bypass and Race Condition in Versa Concerto SD-WAN

CVE-2025-34027 is a critical vulnerability affecting Versa Concerto SD-WAN orchestration platforms, specifically versions 12.1.2 through 12.2. (and potentially others). The flaw lies