Two critical security vulnerabilities in the core of PHP affect a large proportion of websites – from personal WordPress blogs and online stores to government and public administration portals. Updates have been available since October 21. Website operators are strongly urged to install the patches immediately. This article has been indexed from... Weiterlesen: PHP2Shell: What the Vulnerability Means and Why Patching Is Urgent
Intelligence View
⚡ tsecurity.de Intelligence
PHP2Shell: What the Vulnerability Means and Why Patching Is Urgent
Two critical security vulnerabilities in the core of PHP affect a large proportion of websites – from personal WordPress blogs and online stores to government a…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
36 Quellen
CVE-2026-68245 | Linux Kernel up to 6.12.100/6.18.41/7.1.5/7.2-rc2 drm/amdgpu amdgpu_vm.c amdgpu_vm_get_task_info_pasid null pointer dereference (Nessus ID 371704)
35 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-80887 | Linux Kernel up to 6.6.150/6.12.102/6.18.43/7.1.7 vmwgfx vmw_shader_define offset integer overflow (Nessus ID 371704) VVulDB Updatesvor 4 Std.CVE-2026-90062 | Linux Kernel up to 7.2.5 nf_tables race condition (WID-SEC-2026-3444) VVulDB Updatesvor 4 Std.CVE-2026-90063 | Linux Kernel up to 7.2.5 virtio-net tun.c buffer overflow (WID-SEC-2026-3444) VVulDB Updatesvor 4 Std.CVE-2026-90065 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 SMC Socket Release net/smc sk_common_release memory leak (WID-SEC-2026-3444) VVulDB Updatesvor 4 Std.CVE-2026-90064 | Linux Kernel up to 7.2.5 drm/xe memory corruption (WID-SEC-2026-3444) VVulDB Updatesvor 4 Std.CVE-2026-90066 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ftrace samples/ftrace ftrace_direct_multi_init null pointer dereference (WID-SEC-2026-3444)
+29
30 Quellen
CVE-2023-29095 | David F. Carr RSVPMaker Plugin 10.5.5 on WordPress sql injection
29 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-114705 | QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress missing authentication (EUVD-2026-109263) VVulDB Updatesvor 2 Std.CVE-2026-114179 | wordplus BP Better Messages Plugin up to 3.1.3 on WordPress cross site scripting (EUVD-2026-109245) VVulDB Updatesvor 2 Std.CVE-2026-112844 | Arraytics Event Solution Plugin up to 4.1.26 on WordPress cross site scripting (EUVD-2026-109246) VVulDB Updatesvor 2 Std.CVE-2026-114194 | Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress cross site scripting (EUVD-2026-109261) VVulDB Updatesvor 2 Std.CVE-2026-112863 | Hogash KALLYAS Plugin up to 4.25.0 on WordPress cross site scripting (EUVD-2026-108942) VVulDB Updatesvor 2 Std.CVE-2026-87835 | Front End Users Plugin up to 3.2.35 on WordPress Registration access control (EUVD-2026-109230)
+23
17 Quellen
CVE-2026-100821 | Mozilla Firefox up to 115.41/140.16/153.3/156 Panning/Zooming isolation (Nessus ID 371697 / WID-SEC-2026-3654)
16 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-100790 | Mozilla Firefox up to 115.41/140.16/153.3/156 XSLT use after free (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updatesvor 5 Std.CVE-2026-100788 | Mozilla Firefox up to 140.16/153.3/156 WebAssembly memory corruption (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updatesvor 5 Std.CVE-2026-100780 | Mozilla Firefox up to 115.41/140.16/153.3/156 DOM Core/HTML use after free (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updatesvor 4 Std.CVE-2023-4050 | Mozilla Firefox up to 115.9 stack-based overflow (DLA 3521-1 / Nessus ID 239763) VVulDB Updatesvor 4 Std.CVE-2023-4052 | Mozilla Firefox up to 115.43.1 on Windows Updater permission VVulDB Updatesvor 9 Std.CVE-2023-29535 | Mozilla Firefox up to 111 Garbage Collector memory corruption (Bug 1820543 / EUVD-2023-33077)
+10
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4293463/it-security-nachrichten/php2shell-what-the-vulnerability-means-and-why-patching-is-urgent/