A critical sandbox escape vulnerability has been discovered in SandboxJS, a popular JavaScript library used to … Critical SandboxJS Vulnerability Enables Remote Host TakeoverRead more
remote code execution
Metasploit Framework Update Exposes Critical RCE Risks in Enterprise Apps
In modern enterprise environments, attackers no longer rely on single vulnerabilities—they chain them. That reality is … Metasploit Framework Update Exposes Critical RCE Risks in Enterprise AppsRead more
175K Exposed Ollama Hosts Pose Severe Remote Code Execution Risks
Imagine a network of 175,000 AI servers, scattered across 130 countries, operating without security guardrails. Over … 175K Exposed Ollama Hosts Pose Severe Remote Code Execution RisksRead more
PyTorch RCE Vulnerability Actively Exploited: CVE-2026-24747
Machine learning pipelines increasingly power production-critical systems—from fraud detection and recommendation engines to autonomous systems and … PyTorch RCE Vulnerability Actively Exploited: CVE-2026-24747Read more
Over 8,000 SmarterMail Servers Exposed to Critical RCE Vulnerability (CVE-2025-52691)
Security researchers have warned that more than 8,000 internet-facing SmarterMail servers remain vulnerable to a critical … Over 8,000 SmarterMail Servers Exposed to Critical RCE Vulnerability (CVE-2025-52691)Read more
Trend Micro Apex Flaw Allows Silent RCE Attacks
Security management platforms are designed to centralize control, visibility, and trust. But when those platforms themselves … Trend Micro Apex Flaw Allows Silent RCE AttacksRead more
RondoDoX Botnet: Weaponizing React2Shell to Hijack Next.js & IoT at Scale
In late 2025, a fast‑evolving campaign exposed how quickly modern botnets adapt to newly disclosed web … RondoDoX Botnet: Weaponizing React2Shell to Hijack Next.js & IoT at ScaleRead more
HPE OneView CVE-2025-37164: Critical RCE—Fix Now
When a management plane flaw hits CVSS 10.0, CISOs and SOC leaders know it’s an “drop … HPE OneView CVE-2025-37164: Critical RCE—Fix NowRead more
Google Warns of Active Exploitation Targeting React and Next.js Servers
Google Threat Intelligence Group (GTIG) has issued a high-severity warning about the active exploitation of a … Google Warns of Active Exploitation Targeting React and Next.js ServersRead more
Malware Hidden in Android Digital Photo Frames: Millions at Risk
Digital photo frames have long been marketed as simple, family-friendly devices designed to display cherished memories. … Malware Hidden in Android Digital Photo Frames: Millions at RiskRead more