Hackers are sweeping internet-facing PHP infrastructure with publicly circulating PHP2Shell exploit scripts, turning the disclosure of two critical vulnerabilities into a worldwide reconnaissance campaign. Fastly recorded approximately 250,000 requests from PHP2Shell-named tools across roughly 3,200 public IP addresses through midday October 22.... Weiterlesen: Hackers Launch Mass Scanning Campaigns Using Public PHP2Shell Exploit…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Launch Mass Scanning Campaigns Using Public PHP2Shell Exploit Scripts
Hackers are sweeping internet-facing PHP infrastructure with publicly circulating PHP2Shell exploit scripts, turning the disclosure of two critical…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1595TA0007 · Discovery
Active Scanning
Mitigation: M1056 Pre-compromise
Quelle: Kontext-Klassifikation des Artikeltextes
Discovery
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Diese Meldung in anderen Quellen
Verwandte Story-Cluster & Quellen (Vektor-KI)
44 Quellen
CVE-2026-90164 | Linux Kernel up to 7.2.5 ksmbd ksmbd_server_init allocation of resources (WID-SEC-2026-3444)
43 weitere Quellen
VVulDB Updatesvor 7 Std.CVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 7 Std.CVE-2026-90165 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_stop_durable_scavenger null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 7 Std.CVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444) VVulDB Updatesvor 7 Std.CVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444) VVulDB Updatesvor 7 Std.CVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444) VVulDB Updatesvor 7 Std.CVE-2026-90170 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ipc_validate_msg out-of-bounds (WID-SEC-2026-3444)
+37
19 Quellen
CVE-2025-64213 | StylemixThemes MasterStudy LMS Pro Plugin up to 4.7.16 on WordPress insertion of sensitive information into sent data
18 weitere Quellen
VVulDB Updatesvor 7 Std.CVE-2025-60182 | Schiocco Support Board Plugin up to 3.8.7 on WordPress cross site scripting VVulDB Updatesvor 7 Std.CVE-2025-64193 | 8theme XStore Plugin up to 9.6.1 on WordPress php file inclusion VVulDB Updatesvor 7 Std.CVE-2025-64376 | CridioStudio ListingPro Plugin up to 2.9.10 on WordPress cross site scripting VVulDB Updatesvor 7 Std.CVE-2025-64189 | 8theme XStore Core Plugin up to 5.6 on WordPress cross site scripting VVulDB Updatesvor 5 Std.CVE-2026-34885 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress sql injection VVulDB Updatesvor 11 Std.CVE-2025-67526 | ThimPress Sailing Plugin up to 4.4.6 on WordPress php file inclusion
+12
8 Quellen
GitHub Release: cline/cline vdesktop-v0.0.49 (26.10.2026)
7 weitere Quellen
GGitHubvor 4 Std.GitHub Release: cline/cline vsdk/shared/v0.2.0 (26.10.2026) GGitHubvor 4 Std.GitHub Release: cline/cline vsdk/llms/v0.2.0 (26.10.2026) GGitHubvor 4 Std.GitHub Release: cline/cline vsdk/agents/v0.2.0 (26.10.2026) GGitHubvor 4 Std.GitHub Release: cline/cline vsdk/core/v0.2.0 (26.10.2026) GGitHubvor 4 Std.GitHub Release: cline/cline vsdk/ui/v0.2.0 (26.10.2026) GGitHubvor 4 Std.GitHub Release: cline/cline vsdk/sdk/v0.2.0 (26.10.2026)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4296725/it-security-nachrichten/hackers-launch-mass-scanning-campaigns-using-public-php2shell-exploit-scripts/