remote code execution (RCE)

Hackers are exploiting a vulnerability in the FastJson open-source Java library to launch remote code execution (RCE) attacks against US firms. The attacks allow remote code execution without requiring user interaction or elevated privileges.

Security researcher Yuhang Wu at depthfirst published a proof-of-concept exploit for a GitLab vulnerability that allows authenticated users to execute commands as 'git' on unpatched self-managed GitLab 18.11.3 servers. The exploit involves committing two crafted Jupyter notebooks and requesting their diff, requiring no administrator rights or victim interaction.

Cybersecurity researchers identified six vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of Protocol Buffers, which could allow remote code execution (RCE) and denial-of-service (DoS) attacks in Node.js applications through malicious schemas or payloads.

Veeam has released security updates to address a critical vulnerability in its Backup & Replication software that could allow attackers to execute remote code on domain-joined backup servers. The flaw poses a risk of remote code execution (RCE) exploitation.

Cybersecurity researchers identified a critical design flaw in the Model Context Protocol (MCP) that could enable remote code execution (RCE), posing significant risks to systems using vulnerable MCP implementations and threatening the AI supply chain.

The ThreatsDay Bulletin highlights multiple cybersecurity threats, including a Microsoft Defender 0-Day vulnerability, a SonicWall brute-force attack, and a 17-year-old Excel remote code execution (RCE) flaw. The article emphasizes the persistence of ancient vulnerabilities, supply chain risks, and creative hacking tactics.

A proof-of-concept (PoC) demonstrates a stealthy remote code execution (RCE) vulnerability on hardened Linux systems, exploiting Noexec and userland execution mechanisms. The article details techniques bypassing security measures, raising concerns about system vulnerabilities.

The ThreatsDay Bulletin highlights a hybrid P2P botnet, a 13-year-old Apache RCE vulnerability resurfacing, and 18 other security issues. The report emphasizes overlooked vulnerabilities, questionable security practices, and attackers exploiting trusted platforms.