Mastodawn

Алло, ну как там с RCE? Разбираем уязвимость в службе телефонии

Привет, Хабр! Новогодние праздники остались позади, а вместе с первыми рабочими днями подъехал и первый Patch Tuesday от Microsoft. Меня зовут Сергей Близнюк, я пентестер в команде PT SWARM , и в этот раз мне удалось внести свой вклад в кибербезопасность в виде CVE-2026-20931 – RCE-уязвимости в службе телефонии под Windows Server. В этой статье подробно расскажу, что это за сервис, в чем заключается уязвимость и как её могут проэксплуатировать зоумышленники.

https://habr.com/ru/companies/pt/articles/984934/

#rce #remote_code_execution #удаленное_выполнение_кода #windows_server #телефония

Алло, ну как там с RCE? Разбираем уязвимость в службе телефонии

Хабр

Hacker News May 18, 2025

Google fixes high severity Chrome flaw with public exploit
https://www.bleepingcomputer.com/news/security/google-fixes-high-severity-chrome-flaw-with-public-exploit/
#ycombinator #computers #windows #linux #mac #support #tech_support #spyware #malware #virus #security #Exploit #Google #Google_Chrome #Information_Disclosure #Remote_Code_Execution #Vulnerability #virus_removal #malware_removal #computer_help #technical_support

Google fixes high severity Chrome flaw with public exploit

Google has released emergency security updates to patch a high-severity Chrome vulnerability that has a public exploit and can let attackers hijack accounts.

BleepingComputer

Hacker News Apr 6, 2025

Max severity RCE flaw discovered in widely used Apache Parquet
https://www.bleepingcomputer.com/news/security/max-severity-rce-flaw-discovered-in-widely-used-apache-parquet/
#ycombinator #computers #windows #linux #mac #support #tech_support #spyware #malware #virus #security #Apache #Apache_Parquet #Big_Data #RCE #Remote_Code_Execution #Vulnerability #virus_removal #malware_removal #computer_help #technical_support

Max severity RCE flaw discovered in widely used Apache Parquet

A maximum severity remote code execution (RCE) vulnerability has been discovered impacting all versions of Apache Parquet up to and including 1.15.0.

BleepingComputer

Habr Dec 18, 2024

Remote Code Execution в Widget Options (WordPress Plugin) — CVE-2024-8672

28 ноября 2024 года в плагине Widget Options для WordPress, который установлен более чем на 100,000 сайтах , была выявлена критическая уязвимость с CVSS 9.9 . Уязвимость позволяет выполнять удалённое исполнение вредоносного кода . Рассмотрим процесс установки уязвимой версии плагина, а также пример эксплуатации уявзимости.

https://habr.com/ru/articles/867684/

#remote_code_execution #rce #wordpress #wordpress_plugins #cve #vulnerability

Remote Code Execution в Widget Options (WordPress Plugin) — CVE-2024-8672

Введение 28 ноября 2024 года в плагине Widget Options для WordPress, который установлен более чем на 100,000 сайтах , была выявлена критическая уязвимость с CVSS 9.9 . Уязвимость позволяет выполнять...

Хабр

RedPacket Security Nov 28, 2024

Critical Vulnerabilities in Industrial Wireless Access Point: Immediate Action Required - https://www.redpacketsecurity.com/critical-vulnerabilities-discovered-in-industrial-wireless-access-point/

#threatintel #wireless_access_point #remote_code_execution #vulnerabilities

Critical Vulnerabilities in Industrial Wireless Access Point: Immediate Action Required - RedPacket Security

Researchers have identified a total of 20 vulnerabilities in a widely used wireless access point designed for industrial environments, including six

RedPacket Security

RedPacket Security Aug 6, 2024

Critical Vulnerability in Apache OFBiz Requires Immediate Patching - https://www.redpacketsecurity.com/critical-vulnerability-in-apache-ofbiz-requires-immediate-patching/

#threatintel #apache_ofbiz #critical_vulnerability #remote_code_execution

Critical Vulnerability in Apache OFBiz Requires Immediate Patching - RedPacket Security

Organizations utilizing Apache OFBiz have been warned to promptly address a critical vulnerability due to escalating exploitation attempts targeting a

RedPacket Security

RedPacket Security Jul 17, 2024

MHTML Exploited By APT Group Void Banshee - https://www.redpacketsecurity.com/mhtml-exploited-by-apt-group-void-banshee/

#threatintel #remote_code_execution #cyber_security_threats #microsoft_vulnerability

MHTML Exploited By APT Group Void Banshee - RedPacket Security

Security experts have uncovered a critical remote code execution (RCE) vulnerability, identified as CVE-2024-38112, within the MHTML protocol handler.

RedPacket Security

RedPacket Security Mar 15, 2024

Fortinet Patches Critical Bug in FortiClient EMS - https://www.redpacketsecurity.com/fortinet-patches-critical-bug-in-forticlient-ems/

#threatintel #SQL_injection_vulnerability #Remote_code_execution #Fortinet_software_patch

Fortinet Patches Critical Bug in FortiClient EMS - RedPacket Security

Fortinet has patched a critical SQL injection vulnerability in its endpoint management software which could enable remote code execution (RCE) on targeted

RedPacket Security

RedPacket Security Dec 20, 2023

Impact of Log4Shell Bug Was Overblown, Say Researchers - https://www.redpacketsecurity.com/impact-of-log-shell-bug-was-overblown-say-researchers/

#threatintel #Log4Shell_vulnerability #Remote_code_execution #Software_exploitation

Impact of Log4Shell Bug Was Overblown, Say Researchers - RedPacket Security

Security researchers have claimed that a vulnerability described as the biggest and most critical ever discovered was far less dangerous than first believed.

RedPacket Security

RedPacket Security Dec 14, 2023

Microsoft Fixes 34 CVEs and One Zero-Day in December Patch Tuesday - https://www.redpacketsecurity.com/microsoft-fixes-cves-and-one-zero-day-in-december-patch-tuesday/

#threatintel #Patch_Updates #Zero-Day_Vulnerabilities #Remote_Code_Execution