Turning an encrypted backup into Remote Code Execution in Stackfield’s desktop app (CVE-2026-28373). #security

Stackfield Desktop App: RCE via Path … | RCE Security

CVE-2026-28373 describes a path traversal vulnerability in the Stackfield desktop app affecting all versions up to 1.10.1 on Windows and macOS. During the …

rcesecurity.com

Pwning TRUfusion Enterprise again: chaining a pre-auth SSRF (CVE-2025-32355), a default password, and a path traversal (CVE-2025-59793) to gain RCE. #security www.rcesecurity.com/2026/02/when...

When Audits Fail Part 2: From Pre-Auth SSRF … | RCE Security

A pre-auth SSRF in TRUfusion Enterprise (CVE-2025-32355) allows external attackers to reach internal-only services via a misconfigured reverse proxy. This …

rcesecurity.com

I’ve updated my blog post about CVE-2025-9501 and included bypasses for all W3 Total Cache versions up to and including the latest 2.8.15. #wordpress #security www.rcesecurity.com/2025/11/expl...

We took WPScan's one-liner #security advisory for CVE-2025-9501 affecting the W3 Total Cache plugin for #WordPress, analysed its cache parsing internals and built a pre-auth RCE exploit for it 😎 www.rcesecurity.com/2025/11/expl... #infosec

I try to get Rocket Software to fix my pre-auth SSRF affecting TRUfusion for 8 months now. Considering I'm doing this for free, and they didn't even bother to credit me last time, I feel they don't really care. Maybe I shouldn't care either and drop a 0day (+chain to RCE)... #security

Our friends @hashicorp.com released a new version of Consul fixing our reported Denial of Service vulnerabilities (CVE-2025-11374 and CVE-2025-11375). See our official advisories for the details and remediation steps: www.rcesecurity.com/security-adv... #security

OK, Rocket Software believes that the likelihood of my unauthenticated RCE "being exploited is rare"...🤦‍♂️ docs.rocketsoftware.com/bundle/trufu... #security

Another day, another Remote Code Execution (and its 3 friends). Pre-auth path traversal, hard-coded crypto key allowing cookie forgery, arbitrary file write, and PII disclosure in TRUfusion Enterprise (CVE-2025-27222 to CVE-2025-27225) #security www.rcesecurity.com/2025/09/when...

Remember I wanted to drop more bugs (Pre-Auth RCE, Cookie Forgery etc.) in June? Unfortunately, I had to postpone the disclosure because there are still too many vulnerable instances online and the vendor apparently needs to manually patch each one... 🤦‍♂️ #BugBounty #security

"We take our freedom for granted. It’s better to pay the price of convenience and take back ownership of your data." This is it 💯 #privacy

Ciarán Cotter (monke)@monke.ie · last yr.

🐵 MonkeHacks #71 Privacy, Proton and Pentesting #bugbountytips #hacktheplanet #BugBounty monke.ie/p/monkehacks...

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) 📖 Read more: www.helpnetsecurity.com/2025/07/11/c... #cybersecurity #cybersecuritynews #exploit #filesharing @censys.bsky.social @rcesecurity.com @mrtuxracer.bsky.social

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) - Help Net Security

Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server.

helpnetsecurity.com

In terms of that, big shout-out to @proton.me for their stance on #privacy and for their Mail/Drive/Pass products that are a perfect alternative to some of these products! Cheers guys! Appreciate your hard work!

Julien | MrTuxracer@mrtuxracer.bsky.social · last yr.

I am a huge fan of the #BuyFromEU movement! So far, I've ditched a lot of US stuff already, including Microsoft, Dropbox, 1Password, Notion, Grammarly, Amazon, Slack, and Google. This helped a lot: european-alternatives.eu

I am a huge fan of the #BuyFromEU movement! So far, I've ditched a lot of US stuff already, including Microsoft, Dropbox, 1Password, Notion, Grammarly, Amazon, Slack, and Google. This helped a lot: european-alternatives.eu

Homepage | European Alternatives

We help you find European alternatives for digital service and products, like cloud services and SaaS products.

european-alternatives.eu

Here's an update to the blog post about CVE-2025-47812, which now includes a way to leak a user's password (CVE-2025-27889), but requires a bit of social engineering. #security #BugBounty

RCE Security@rcesecurity.com · last yr.

We've just updated our latest blog post about CVE-2025-47812 to include another disclosure that went a little under the radar but could be used to leak a user's password: CVE-2025-27889. #security #BugBounty www.rcesecurity.com/2025/06/what...

As promised! Here's a root/SYSTEM-level RCE (aka CVE-2025-47812) affecting Wing FTP Server in versions before 7.4.4. Enjoy 🥷 #security #BugBounty

RCE Security@rcesecurity.com · last yr.

During a customer pentest, we went from anonymous Read-Only FTP access to full root-level remote code execution by abusing a string parsing discrepancy in Wing FTP's username handling. #security #BugBounty www.rcesecurity.com/2025/06/what...

I'll publish 4 CVEs later today, including one unauthenticated Root/SYSTEM-level RCE. I'm a bit nervous, TBH, because it potentially affects 15k systems on the internet. But, according to the vendor, most instances should've been updated already 😬

I have plenty of public disclosures planned for June: 2x RCE (one as root!), Full SSRF, Directory traversal, Cookie forgery leading to auth bypass, Multiple information disclosures incl. PII Link injection leaking clear-text passwords All pre-auth 🙃 #security #BugBounty

Yay! They even decided to reward a $7,000 #BugBounty for the cool chain. Looks like trying harder was absolutely worth it! Also: Triaged, fixed, and rewarded within 2 hours of submission 😎

Julien | MrTuxracer@mrtuxracer.bsky.social · last yr.

OK, nvm. I've just used a postMessage listener to leak what I want. Much cooler than a lame open redirect 🙃

OK, nvm. I've just used a postMessage listener to leak what I want. Much cooler than a lame open redirect 🙃

Julien | MrTuxracer@mrtuxracer.bsky.social · last yr.

I'm just a freaking open URL redirect away from a $5,000 ATO. At this point, I start to dislike people who report those for an informative/$100 bounty... 😒

I'm just a freaking open URL redirect away from a $5,000 ATO. At this point, I start to dislike people who report those for an informative/$100 bounty... 😒

After last week example (ERNW), here’s another infosec company (WatchTowr) which refused to abide by the vendor’s vulnerability disclosure terms labs.watchtowr.com/sysowned-you...

Since Hex-Rays changed their licensing model, I've switched to @binary.ninja, and I'm really impressed with how good it is, especially their high-level IL is 🔥

Let's say you have a web app that runs on Windows and has its own auth system (so it's decoupled from Windows Auth). It has a built-in feature that allows admin users of the web app to execute code on the underlying server. However, it does so using NT Authority/SYSTEM. Is this a vulnerability?

When you jump on an AI trend just remember the environmental harm that’s causing for absolutely nothing of value whatsoever. Then decide if it’s worth it for an unimpressive image. Just sayin

After being active here for a while now, I noticed that I don't have the same reach compared to X (i.e., waaaaay fewer visits on my blog). I'm considering reposting my stuff there again for visibility; maybe with a delay to lure more users to Bluesky? 🤔

Watch out for my latest discovery, CVE-2025-27889, which will be released next week. Based on the number of hits on Shodan, things look quite promising 😎

I do have quite a backlog of blog posts, so let's start with this one 😎

RCE Security@rcesecurity.com · last yr.

Here's a short write-up about CVE-2023-6542 a #security vulnerability affecting the SAP Emarsys SDK for Android allowing attackers to leak sensitive data from an app's private data directory and also load remote contents into an app overlay. www.rcesecurity.com/2025/04/sap-...

This place feels so much calmer and a lot less toxic than Elon‘s place 👌

Oh, beautiful Japan ❤️ It's a shame I'll have to leave you soon 😢

Hello world 👋