TL;DR: PHP2Shell has been the target of widespread attack attempts since its disclosure on October 21, 2026, with first attempts seen as early as October 17 according to Amazon. A login does not protect you, and there are no official updates for PHP 8.1 and older. In industrial sites, PHP sits in the web interfaces of controllers, industrial... Weiterlesen: PHP2Shell in OT Sites: Why the Vulnerability Will Linger for Years
Intelligence View
⚡ tsecurity.de Intelligence
PHP2Shell in OT Sites: Why the Vulnerability Will Linger for Years
TL;DR: PHP2Shell has been the target of widespread attack attempts since its disclosure on October 21, 2026, with first attempts seen as early as October 17…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
Security: Pufferüberlauf in helix (Fedora)
11 weitere Quellen
PPro-Linuxvor 3 Std.Security: Pufferüberlauf in rust-gitui (Fedora) PPro-Linuxvor 3 Std.Security: Pufferüberlauf in rust-dua-cli (Fedora) PPro-Linuxvor 3 Std.Security: Pufferüberlauf in stgit (Fedora) PPro-Linuxvor 3 Std.Security: Pufferüberlauf in rust-gengo-bin (Fedora) PPro-Linux Securityvor 3 Std.Pufferüberlauf in perl-Alien-Brotli (Fedora) PPro-Linux Securityvor 3 Std.Pufferüberlauf in brotli (Fedora)
+5
10 Quellen
APPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2
9 weitere Quellen
FFull Disclosurevor 1 Std.APPLE-SA-10-26-2026-2 iOS 26.7.2 and iPadOS 26.7.2 FFull Disclosurevor 1 Std.APPLE-SA-10-26-2026-3 iOS 18.7.11 and iPadOS 18.7.11 FFull Disclosurevor 1 Std.APPLE-SA-10-26-2026-4 macOS Golden Gate 27.2 FFull Disclosurevor 1 Std.APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2 FFull Disclosurevor 1 Std.APPLE-SA-10-26-2026-7 tvOS 27.2 FFull Disclosurevor 1 Std.APPLE-SA-10-26-2026-8 watchOS 27.2
+3
8 Quellen
CVE-2026-33867 | WWBN AVideo up to 26.0 Database cleartext storage (GHSA-363v-5rh8-23wg)
7 weitere Quellen
Vvuldb.comvor 2 Std.CVE-2026-34362 | WWBN AVideo up to 26.0 functions.php verifyTokenSocket session expiration (GHSA-2mg4-pfgx-64cf) Vvuldb.comvor 2 Std.CVE-2026-33767 | WWBN AVideo up to 26.0 Query String objects/like.php getLike videos_id sql injection (GHSA-fj74-qxj7-r3vc) Vvuldb.comvor 2 Std.CVE-2026-33770 | WWBN AVideo up to 26.0 Title objects/category.php fixCleanTitle clean_title sql injection (GHSA-584p-rpvq-35vf) VVulDB Updatesvor 6 Std.CVE-2026-33764 | WWBN AVideo up to 26.0 save.json.php id authorization VVulDB Updatesvor 6 Std.CVE-2026-33766 | WWBN AVideo up to 26.0 HTTP Redirect isSSRFSafeURL server-side request forgery VVulDB Updatesvor 6 Std.CVE-2026-33761 | WWBN AVideo up to 26.0 Email Message list.json.php User::isAdmin authorization
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4288970/sicherheitsluecken-cve/php2shell-in-ot-sites-why-the-vulnerability-will-linger-for-years/