HackingPassion.comRemote Code Execution
10 posts
One crafted file opened in Paint could run an attacker’s code. In all 6 countries checked, the Store had no safe Paint. Auto-updates did not help. The fix …
Linux servers on Ubuntu 22.04, 24.04 and 26.04 are 18 days behind Debian on a 9.8 kernel bug. 53 minutes, no password, and a server runs commands as root. An AI …
Up to 3 million Windows PCs and 350,000 Macs kept asking dead web addresses for updates to a movie app from 2014. The owners did nothing wrong. The updater had …
More than 22 million PHP installations sat exposed online this week, facing two flaws that need no password. The details leaked before a patch existed. Updating …
Three bugs chained in order gave an attacker full control of a smart TV, straight over the home WiFi, without the set ever asking for its PIN. The owner did …
Anyone on your network could take over a Mac with Screen Sharing turned on. All it took was the target’s IP address. The login check handed back an old …
A hole in WordPress handed your database to someone who never logged in. For 227 days it took one request. It needed no password and no plugin, just an address …
Internet Explorer can still take over a fully patched Windows machine, years after Microsoft retired it in 2022. The code that ran it was never removed from …
GitHub RCE CVE. A semicolon broke GitHub. One character in a push option field, and a security researcher was running code on the backend servers that store …
Bing had a CVSS 10.0 vulnerability in its backend infrastructure, the same infrastructure that powers Edge, Windows Search, and Copilot integrations across …