Engineering notes from the trenches.
Reverse-engineering APIs, automation that survives production, security research, and honest takes on the tools I ship with.
Filtered by tag:#rce×
Sort
2 posts ← reset filters
SecurityCVE-2026-3854: A CVSS 8.7 RCE in GitHub Enterprise Server — What It Means and What to Do Right Now
A critical remote code execution vulnerability targeting GitHub Enterprise Server surfaced today. No need to panic, but you do need to act. Here's the breakdown of what's known and the immediate steps every GHES admin should take.
Jul 23, 2026 · 9 min- Security
PenPot's RCE Blunder: The Dangerous Default of 0.0.0.0 and Unauthenticated Execution
A critical RCE vulnerability in PenPot's MCP module exposed instances to trivial code execution due to binding to all interfaces and an unauthenticated /execute endpoint. Learn what happened, why it matters, and how to secure your systems.
May 20, 2026 · 6 min