HackingPassion.comRemote Code Execution
4 posts
WordPress Let One Request Read Your Database for 227 Days
A hole in WordPress handed your database to someone who never logged in. For 227 days it took one request. It needed no password and no plugin, just an address …
Internet Explorer Can Still Take Over a Fully Patched Windows PC in 2026
Internet Explorer can still take over a fully patched Windows machine, years after Microsoft retired it in 2022. The code that ran it was never removed from …
GitHub RCE CVE-2026-3854: One Semicolon, Millions of Private Repositories
GitHub RCE CVE. A semicolon broke GitHub. One character in a push option field, and a security researcher was running code on the backend servers that store …
Microsoft Bing CVSS 10.0: CVE-2026-33819 Remote Code Execution Explained
Bing had a CVSS 10.0 vulnerability in its backend infrastructure, the same infrastructure that powers Edge, Windows Search, and Copilot integrations across …