Topic: remote code execution risk
-
Critical WinRAR RCE Flaw Fixed—Update Now (CVE-2025-6218)
A critical security flaw (CVE-2025-6218) in WinRAR allows attackers to manipulate file paths, potentially leading to remote code execution on vulnerable systems. The vulnerability is patched in WinRAR 7.12 beta 1, and users of versions 7.11 or earlier must update immediately to avoid exploitation...
Read More » -
Adobe Fixes Critical AEM Forms Flaws with Public Exploit Code
Adobe has released urgent patches for critical vulnerabilities (CVE-2025-54253, CVE-2025-54254) in its Experience Manager Forms platform, with exploit code already public. The flaws allow remote code execution without authentication, posing severe risks as they affect all supported JEE versions p...
Read More » -
Critical WordPress AI Plugin Vulnerability Impacts 100K+ Sites
A critical security flaw in the AI Engine WordPress plugin (scoring 8.8/10) exposes over 100,000 websites, allowing attackers with subscriber accounts to upload harmful files via the REST API. This is the fourth major vulnerability in July 2025, following a trend of similar high-severity flaws, i...
Read More »