We continuously map, monitor, and test your external attack surface — just like a real attacker would.https://bsky.app/profile/rcesecurity.comhttps://bsky.app/profile/rcesecurity.com/post/3mhssy6a3tc2rTurning an encrypted backup into Remote Code Execution in Stackfield’s desktop app (CVE-2026-28373). #security https://www.rcesecurity.com/2026/03/stackfield-desktop-app-rce-via-path-traversal-and-arbitrary-file-write-cve-2026-28373/24 Mar 2026 14:47 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3mhssy6a3tc2rhttps://bsky.app/profile/rcesecurity.com/post/3meyvft2hvs2uPwning TRUfusion Enterprise again: chaining a pre-auth SSRF (CVE-2025-32355), a default password, and a path traversal (CVE-2025-59793) to gain RCE. #security https://www.rcesecurity.com/2026/02/when-audits-fail-from-pre-auth-ssrf-to-rce-in-trufusion-enterprise/16 Feb 2026 20:31 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3meyvft2hvs2uhttps://bsky.app/profile/rcesecurity.com/post/3m5yrx7pbfs22We took WPScan's one-liner #security advisory for CVE-2025-9501 affecting the W3 Total Cache plugin for #WordPress, analysed its cache parsing internals and built a pre-auth RCE exploit for it 😎 https://www.rcesecurity.com/2025/11/exploiting-a-pre-auth-rce-in-w3-total-cache-for-wordpress-cve-2025-9501/ #infosec19 Nov 2025 17:33 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3m5yrx7pbfs22https://bsky.app/profile/rcesecurity.com/post/3m4ntpzukyk2sOur friends @hashicorp.com released a new version of Consul fixing our reported Denial of Service vulnerabilities (CVE-2025-11374 and CVE-2025-11375). See our official advisories for the details and remediation steps: https://www.rcesecurity.com/security-advisories/ #security02 Nov 2025 15:40 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3m4ntpzukyk2shttps://bsky.app/profile/rcesecurity.com/post/3m22ui2mis22wAnother day, another Remote Code Execution (and its 3 friends). Pre-auth path traversal, hard-coded crypto key allowing cookie forgery, arbitrary file write, and PII disclosure in TRUfusion Enterprise (CVE-2025-27222 to CVE-2025-27225) #security https://www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnerabilities-in-trufusion-enterprise/30 Sep 2025 15:43 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3m22ui2mis22whttps://bsky.app/profile/rcesecurity.com/post/3lt2ytb5zbc2oWe've just updated our latest blog post about CVE-2025-47812 to include another disclosure that went a little under the radar but could be used to leak a user's password: CVE-2025-27889. #security #BugBounty https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/03 Jul 2025 15:04 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3lt2ytb5zbc2ohttps://bsky.app/profile/rcesecurity.com/post/3lstwe5shl225During a customer pentest, we went from anonymous Read-Only FTP access to full root-level remote code execution by abusing a string parsing discrepancy in Wing FTP's username handling. #security #BugBounty https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/30 Jun 2025 19:31 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3lstwe5shl225https://bsky.app/profile/rcesecurity.com/post/3lmhqxxcio22bHere's a short write-up about CVE-2023-6542 a #security vulnerability affecting the SAP Emarsys SDK for Android allowing attackers to leak sensitive data from an app's private data directory and also load remote contents into an app overlay. https://www.rcesecurity.com/2025/04/sap-emarsys-sdk-for-android-sensitive-data-leak-cve-2023-6542/10 Apr 2025 14:52 +0000at://did:plc:qmt56ayzedk3ndf4a2j2fyoq/app.bsky.feed.post/3lmhqxxcio22b