Custom sprite injection over WIFI using RCE on a legit copy of Pokémon pearl :)
December 15, 2024 at 6:11 PM
Custom sprite injection over WIFI using RCE on a legit copy of Pokémon pearl :)
99% of bug bounty hunters stop right before they get a $1mil RCE 😢
December 17, 2024 at 3:40 PM
99% of bug bounty hunters stop right before they get a $1mil RCE 😢
🚨 Vasco vai solicitar Recuperação Judicial para atacar suas dívidas.
Desde 2021, o clube paga seus débitos através do Regime Centralizado de Execuções — RCE.
No entanto, o Vasco deve partir para a RJ por considerar que o RCE 'enxuga gelo' no pagamento das dívidas.
📰 | ge
📸 | Marcelo Wance
Desde 2021, o clube paga seus débitos através do Regime Centralizado de Execuções — RCE.
No entanto, o Vasco deve partir para a RJ por considerar que o RCE 'enxuga gelo' no pagamento das dívidas.
📰 | ge
📸 | Marcelo Wance
September 20, 2024 at 9:46 PM
🚨 Vasco vai solicitar Recuperação Judicial para atacar suas dívidas.
Desde 2021, o clube paga seus débitos através do Regime Centralizado de Execuções — RCE.
No entanto, o Vasco deve partir para a RJ por considerar que o RCE 'enxuga gelo' no pagamento das dívidas.
📰 | ge
📸 | Marcelo Wance
Desde 2021, o clube paga seus débitos através do Regime Centralizado de Execuções — RCE.
No entanto, o Vasco deve partir para a RJ por considerar que o RCE 'enxuga gelo' no pagamento das dívidas.
📰 | ge
📸 | Marcelo Wance
Them: I love a man who takes control
Me: Let me show you the set of devices I have unauthenticated RCE over
Me: Let me show you the set of devices I have unauthenticated RCE over
November 26, 2024 at 9:09 AM
Them: I love a man who takes control
Me: Let me show you the set of devices I have unauthenticated RCE over
Me: Let me show you the set of devices I have unauthenticated RCE over
an RCE exploit was just discovered in all rabbits released after 2017. if you haven't already, please update your rabbit immediately
October 7, 2025 at 8:48 AM
an RCE exploit was just discovered in all rabbits released after 2017. if you haven't already, please update your rabbit immediately
This repo is hype moments and aura honestly github.com/sensepost/bl...
GitHub - sensepost/bloatware-pwn: LPE / RCE Exploits for various vulnerable "Bloatware" products
LPE / RCE Exploits for various vulnerable "Bloatware" products - sensepost/bloatware-pwn
github.com
August 19, 2025 at 5:39 AM
This repo is hype moments and aura honestly github.com/sensepost/bl...
update no qbittorrent tb
cybersecuritynews.com/qbittorrent-...
cybersecuritynews.com/qbittorrent-...
November 1, 2024 at 10:54 PM
update no qbittorrent tb
cybersecuritynews.com/qbittorrent-...
cybersecuritynews.com/qbittorrent-...
RCE that airdrops worms Armageddon to your computer
April 10, 2025 at 10:52 AM
RCE that airdrops worms Armageddon to your computer
SAF do Botafogo paga mais R$ 3,3 milhões no RCE para quitar dívidas trabalhistas
SAF do Botafogo paga mais R$ 3,3 milhões no RCE para quitar dívidas trabalhistas - FogãoNET
A SAF do Botafogo pagou neste mês de outubro R$ 3,29 milhões no Regime Centralizado de Execuções (RCE) referente ao passivo trabalhista do clube, informou ...
www.fogaonet.com
October 14, 2024 at 11:36 PM
SAF do Botafogo paga mais R$ 3,3 milhões no RCE para quitar dívidas trabalhistas
… are fucking kidding me.
A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!!
This is not what taking the role of supply chain stewards seriously looks like.
A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!!
This is not what taking the role of supply chain stewards seriously looks like.
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
www.wiz.io
April 28, 2026 at 7:25 PM
… are fucking kidding me.
A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!!
This is not what taking the role of supply chain stewards seriously looks like.
A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!!
This is not what taking the role of supply chain stewards seriously looks like.
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Woah. Backdoor in liblzma targeting ssh servers.
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
March 30, 2024 at 5:13 PM
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
time do cara tava devendo até o RCE esses dias e quer falar merda pqp
September 4, 2024 at 1:14 AM
time do cara tava devendo até o RCE esses dias e quer falar merda pqp
F5 BIG-IP APM 0-day RCE under attack
🔗 https://www.theregister.com/security/2026/09/23/someones-attacking-a-critical-0-day-rce-in-f5-big-ip-apm/5298659
🔗 https://www.theregister.com/security/2026/09/23/someones-attacking-a-critical-0-day-rce-in-f5-big-ip-apm/5298659
September 24, 2026 at 12:06 PM
F5 BIG-IP APM 0-day RCE under attack
🔗 https://www.theregister.com/security/2026/09/23/someones-attacking-a-critical-0-day-rce-in-f5-big-ip-apm/5298659
🔗 https://www.theregister.com/security/2026/09/23/someones-attacking-a-critical-0-day-rce-in-f5-big-ip-apm/5298659
windows 11 notepad has an RCE in it are you kidding me
February 11, 2026 at 11:56 AM
windows 11 notepad has an RCE in it are you kidding me
WordPress path traversal RCE
WordPress has an unauthenticated path traversal vulnerability in page-template resolution, affecting versions 4.7.0 through 7.1.1, which can lead to conditional RCE.
WordPress has an unauthenticated path traversal vulnerability in page-template resolution, affecting versions 4.7.0 through 7.1.1, which can lead to conditional RCE.
September 22, 2026 at 6:30 PM
WordPress path traversal RCE
WordPress has an unauthenticated path traversal vulnerability in page-template resolution, affecting versions 4.7.0 through 7.1.1, which can lead to conditional RCE.
WordPress has an unauthenticated path traversal vulnerability in page-template resolution, affecting versions 4.7.0 through 7.1.1, which can lead to conditional RCE.
Love me some old-school datacenter architecture.
(Handelingenkamer, The Hague. Photo: Dick Valentijn/RCE.)
(Handelingenkamer, The Hague. Photo: Dick Valentijn/RCE.)
August 3, 2026 at 12:12 PM
Love me some old-school datacenter architecture.
(Handelingenkamer, The Hague. Photo: Dick Valentijn/RCE.)
(Handelingenkamer, The Hague. Photo: Dick Valentijn/RCE.)
Good news! I've uploaded a new post about the most complex and beautiful vulnerability I've ever found, involving patching and uploading deprecated .jar libraries to get RCE on a big target. It's a very technical post, but I hope you like it ! :)
www.hacefresko.com/posts/rce-on...
www.hacefresko.com/posts/rce-on...
A very fancy way to obtain RCE on a Solr server
www.hacefresko.com
February 26, 2025 at 4:40 PM
Good news! I've uploaded a new post about the most complex and beautiful vulnerability I've ever found, involving patching and uploading deprecated .jar libraries to get RCE on a big target. It's a very technical post, but I hope you like it ! :)
www.hacefresko.com/posts/rce-on...
www.hacefresko.com/posts/rce-on...
Kijk dan toch, lieve mensen!
📷: Jarno Pors/RCE
📷: Jarno Pors/RCE
June 26, 2026 at 5:19 AM
Kijk dan toch, lieve mensen!
📷: Jarno Pors/RCE
📷: Jarno Pors/RCE
new exploit just dropped, collect racism labels until you get RCE
March 20, 2024 at 11:21 PM
new exploit just dropped, collect racism labels until you get RCE
RCE vuln headmate
January 21, 2026 at 3:53 AM
RCE vuln headmate
Hey gang if you play BO3 remember to install the tarrif7patch it fixes the RCE (Raising Cost of Eggs)
May 28, 2025 at 1:45 PM
Hey gang if you play BO3 remember to install the tarrif7patch it fixes the RCE (Raising Cost of Eggs)
My main goal in life is helping ITsec people put food on the table. This next RCE vulnerability is for you <3
November 21, 2024 at 11:55 AM
My main goal in life is helping ITsec people put food on the table. This next RCE vulnerability is for you <3
mythos find me 0-click RCE in Rust Bun, make no mistakes
May 14, 2026 at 8:47 AM
mythos find me 0-click RCE in Rust Bun, make no mistakes
Ich küss das Hirn aller Beteiligten. Die Theaterinszenierung von RCE @sibylleberg.bsky.social im Berliner Ensemble ist einfach brillant, minutenlanger Beifall.
April 26, 2024 at 7:26 PM
Ich küss das Hirn aller Beteiligten. Die Theaterinszenierung von RCE @sibylleberg.bsky.social im Berliner Ensemble ist einfach brillant, minutenlanger Beifall.