Hackers are exploiting a critical, unpatched remote code execution (RCE) vulnerability in Fastjson without authentication.

CVE-2026-63077 could let unauthenticated attackers bypass TeamCity checks and run OS commands; JetBrains patched all ...

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution ...

Fastjson Zero-Day Exposes Java Servers To Remote Attacks Arabian Post. clearfix>Attackers are exploiting a critical vulnerability in Alibaba's Fastjson library that can allow unauthenticated remote ...

A public proof-of-concept for the vBulletin RCE vulnerability CVE-2026-61511 is now live. Here's how the eval() injection ...

Under certain conditions, attackers can chain a set of vulnerabilities in multiple components of the CUPS open-source printing system to execute arbitrary code remotely on vulnerable machines. Tracked ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks. Organizations using vulnerable versions of the Hugging ...

Cursor AI code editor faces unpatched vulnerability enabling code execution, adding to a string of critical RCE flaws ...

The inaugural STAR Labs report ran real exploits on AI agents and found that 91% of successful attacks on productivity agents left no trace. MOUNTAIN VIEW, Calif., July 14, 2026 / ...

F5 patches CVE-2026-42533, a regex map heap overflow that crashes nginx workers and may allow RCE in specific configurations.

F5 has issued a critical security advisory for NGINX, warning of a flaw that allows attackers to crash servers and ...