Security Intel Hub 666— Search: `RCE`×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

SourceCodester Online Clearance System 1.0 Session Forgery Vulnerability Analysis

github.com · 2025-10-11

### Critical Vulnerability Information - **Vulnerability Type**: Incorrect Access Control - **Affected Product**: SourceCodester Online Clearance System 1.0 - **Attack Type**: Remote #### Description …

IceScrum ≤7.5.4 JDBC Connection String RCE via testDbConnection (CVE-2025-60785)

zdaylabs.com · 2025-11-04

### Key Information #### CVE Information - **CVE ID:** CVE-2025-60785 - **Severity:** High - **CVSS v3.1:** 8.8 - **Affected Vendor:** IceScrum - **Affected Product:** IceScrum - **Vulnerability Type:…

HP AutoPass License Server Unauthenticated File Upload RCE (CVE-2013-6221)

github.com · 2025-11-08

Based on the information in the webpage screenshot, the following key details about the vulnerability can be obtained: - **Vulnerability Name**: HP AutoPass License Server File Upload - **Vulnerabilit…

iOS 15/iPadOS 15 Security Update: Accessory Manager RCE and other CVE fixes

support.apple.com · 2025-11-08

### Vulnerability Key Information #### iOS 15 and iPadOS 15 Security Content Overview - **Release Date**: September 20, 2021 - **Affected Components**: Accessory Manager, AppleMobileFileIntegrity, App…

Advantech WebAccess/SCADA Path Traversal Leading to RCE (CVE-2020-25161)

us-cert.cisa.gov · 2025-11-09

## Vulnerability Key Information ### 1. Vulnerability Summary - **CVSSv3 Score:** 8.8 - **Exploitability:** Remote exploitation / Low skill level required - **Vendor:** Advantech - **Affected Equipmen…

RHSA-2015:2517: Red Hat Fuse Service Works fixes Commons Collections deserialization RCE (CVE-2015-7501)

rhn.redhat.com · 2025-11-09

- **Title**: RHSA-2015:2517 – Security Advisory - **Summary**: Critical: Red Hat Fuse Service Works 6.0.0 commons-collections Security Update - **Type/Severity**: Security Advisory: Critical - **Subje…

CVSS 5.5

CVE-2016-15007: SOQL Injection in Centralized-Salesforce-Dev-Framework SOQL Handler

vuldb.com · 2025-11-09

### Vulnerability Key Information - **CVE Identifier**: CVE-2016-15007 - **CVSS Meta Temp Score**: 6.9 - **Current Exploit Price**: $0-$5k - **CTI Interest Score**: 0.14 #### Summary - **Vulnerability…

CentOS-WebPanel Vulnerabilities: Pre-Auth RCE, Account Takeover, and Command Injection

github.com · 2025-11-09

### Vulnerability Overview - **Project Name**: CentOS-WebPanel - **Description**: Proof-of-Concept (PoC) script demonstrating vulnerabilities in CentOS Web Panel. ### Vulnerability Types - **Pre-Auth …

CVSS 7.2

WooCommerce Plugin Advanced Local Pickup 1.6.0 Security Fix Analysis

plugins.trac.wordpress.org · 2025-11-09

### Key Information Summary #### 1. Plugin Update - **Plugin Name**: Advanced Local Pickup for WooCommerce - **Version Update**: - 1.5.5 → 1.6.0 - Update Commit ID: [2983681] → [2986002] #### 2. Modif…

CVSS 5.3

WooCommerce Plugin CSRF Vulnerability: Missing Nonce Verification in Ajax.php

plugins.trac.wordpress.org · 2025-11-10

Key information is as follows: 1. **File Path**: - File path: `flexible-refund-and-return-order-for-woocommerce/trunk/vendor_prefixed/wpdesk/flexible-refunds-core/src/Integration/Ajax.php` 2. **File V…

QuickBox CE/Pro Authenticated RCE and Privilege Escalation Analysis (CVE-2020-13448/13694/13695)

s1gh.sh · 2025-11-10

### Vulnerability Overview - **CVE IDs**: CVE-2020-13448, CVE-2020-13694, CVE-2020-13695 - **Affected Versions**: - QuickBox CE /inc/config.php?id=88&servicestart=a;; ``` #### Privilege Escalation - *…

Cisco ASA/FTD/IOS Web Services RCE and Unauthorized Access Vulnerabilities (CVE-2025-20333)

tools.cisco.com · 2025-11-11

### Critical Vulnerability Information #### Vulnerability Overview - **Title**: Cisco Security Advisories - **Source**: Cisco Security #### Specific Vulnerability Details - **CVE-2025-20333** - **Desc…

CVSS 6.5

Ceph Multiple Vulnerabilities Summary (CVE-2019-10222 etc): RCE/Privilege Escalation/Info Disclosure

lists.debian.org · 2025-11-11

### Vulnerability Key Information - **CVE IDs**: - CVE-2019-10222, CVE-2020-1700, CVE-2020-1760, CVE-2020-10753, CVE-2020-12059, CVE-2020-25678, CVE-2020-27781, CVE-2021-3524, CVE-2021-3531, CVE-2021-…

CentOS Web Panel ajax_mod_security Command Injection RCE (CVE-2020-15421)

www.zerodayinitiative.com · 2025-11-13

### Key Information on the Vulnerability - **Date**: June 25th, 2020 - **Title**: (0Day) CentOS Web Panel ajax_mod_security check_ip Command Injection Remote Code Execution Vulnerability - **IDs**: - …

Crater Invoice CVE-2023-46865 Post-Auth Unrestricted File Upload RCE

notes.netbytesec.com · 2025-11-13

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2023-46865 - **Title**: Post-Auth Unrestricted File Upload and Code Execution via IDAT in Crater Invoice - **Securi…

CVSS 6.3

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 666— Search: `RCE`×

SourceCodester Online Clearance System 1.0 Session Forgery Vulnerability Analysis

IceScrum ≤7.5.4 JDBC Connection String RCE via testDbConnection (CVE-2025-60785)

HP AutoPass License Server Unauthenticated File Upload RCE (CVE-2013-6221)

iOS 15/iPadOS 15 Security Update: Accessory Manager RCE and other CVE fixes

Advantech WebAccess/SCADA Path Traversal Leading to RCE (CVE-2020-25161)

RHSA-2015:2517: Red Hat Fuse Service Works fixes Commons Collections deserialization RCE (CVE-2015-7501)

CVE-2016-15007: SOQL Injection in Centralized-Salesforce-Dev-Framework SOQL Handler

CentOS-WebPanel Vulnerabilities: Pre-Auth RCE, Account Takeover, and Command Injection

WooCommerce Plugin Advanced Local Pickup 1.6.0 Security Fix Analysis

WooCommerce Plugin CSRF Vulnerability: Missing Nonce Verification in Ajax.php

QuickBox CE/Pro Authenticated RCE and Privilege Escalation Analysis (CVE-2020-13448/13694/13695)

Cisco ASA/FTD/IOS Web Services RCE and Unauthorized Access Vulnerabilities (CVE-2025-20333)

Ceph Multiple Vulnerabilities Summary (CVE-2019-10222 etc): RCE/Privilege Escalation/Info Disclosure

CentOS Web Panel ajax_mod_security Command Injection RCE (CVE-2020-15421)

Crater Invoice CVE-2023-46865 Post-Auth Unrestricted File Upload RCE

SQL Injection in SourceCodester Vehicle Service Management System 1.0 (CVE-2023-2097)

Iceape Security Update: Multiple UAF/Integer Overflow RCE Vulnerabilities (CVE-2011-0083, CVE-2011-2371, etc.)

Debian DSA-1671-1: iceweasel multiple vulnerabilities fix (RCE/SOP bypass)

Advanced School Management System v1.0 Arbitrary File Upload RCE

AudioCodes Fax/IVR Appliance Unauthenticated File Upload RCE (CVE-2025-34328)

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 666— Search: RCE×

Security Intel Hub 666— Search: `RCE`×