EILMELDUNGEN LIVE
Sicherheitslücken (CVE)ZDI-26-832: AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-833: Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-831: Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-830: Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53679 | Linux Kernel up to 6.2.2 wifi mt7601u_rx_skb_from_seg dma_len null pointer dereference (WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53684 | Linux Kernel up to 5.15.105/6.1.22/6.2.9 xfrm xfrm_user privilege escalation (Nessus ID 302439 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53687 | Linux Kernel up to 6.4.4 tty s3c24xx_serial_getclk memory leak (Nessus ID 276910 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53680 | Linux Kernel up to 5.10.219/5.15.106/6.1.23/6.2.10 OPDESC nfsd4_ops out-of-bounds (Nessus ID 277757 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53683 | Linux Kernel up to 6.3.3 assertion (EUVD-2025-31927 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53685 | Linux Kernel up to 6.1.29/6.3.3 write memory leak (Nessus ID 297598 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-832: AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-833: Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-831: Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-830: Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability(28.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53679 | Linux Kernel up to 6.2.2 wifi mt7601u_rx_skb_from_seg dma_len null pointer dereference (WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53684 | Linux Kernel up to 5.15.105/6.1.22/6.2.9 xfrm xfrm_user privilege escalation (Nessus ID 302439 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53687 | Linux Kernel up to 6.4.4 tty s3c24xx_serial_getclk memory leak (Nessus ID 276910 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53680 | Linux Kernel up to 5.10.219/5.15.106/6.1.23/6.2.10 OPDESC nfsd4_ops out-of-bounds (Nessus ID 277757 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53683 | Linux Kernel up to 6.3.3 assertion (EUVD-2025-31927 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Sicherheitslücken (CVE)CVE-2023-53685 | Linux Kernel up to 6.1.29/6.3.3 write memory leak (Nessus ID 297598 / WID-SEC-2025-2229)(28.10.2026 um 23:24 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Investigating the Return of the PHP2Shell Nightmare

The public PoC claiming “RCE via a PHP core UAF” did not work in my lab. After reading the official patches, the actual causes turned out to be state cor…

Vulnerabilities (CVE) DEV Community 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (DEV Community)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

The public PoC claiming “RCE via a PHP core UAF” did not work in my lab. After reading the official patches, the actual causes turned out to be state corruption during OOM handling and state left behind across requests—not a zval UAF within a single request. What this article concludes I built a local Docker lab to investigate the PHP... Weiterlesen: Investigating the Return of the PHP2Shell Nightmare

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
4 Knoten · 3 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

6 sources
CVE-2023-53679 | Linux Kernel up to 6.2.2 wifi mt7601u_rx_skb_from_seg dma_len null pointer dereference (WID-SEC-2025-2229)
5 more sources
VulDB Updates1 hour agoCVE-2023-53684 | Linux Kernel up to 5.15.105/6.1.22/6.2.9 xfrm xfrm_user privilege escalation (Nessus ID 302439 / WID-SEC-2025-2229) VulDB Updates1 hour agoCVE-2023-53687 | Linux Kernel up to 6.4.4 tty s3c24xx_serial_getclk memory leak (Nessus ID 276910 / WID-SEC-2025-2229) VulDB Updates1 hour agoCVE-2023-53680 | Linux Kernel up to 5.10.219/5.15.106/6.1.23/6.2.10 OPDESC nfsd4_ops out-of-bounds (Nessus ID 277757 / WID-SEC-2025-2229) VulDB Updates1 hour agoCVE-2023-53683 | Linux Kernel up to 6.3.3 assertion (EUVD-2025-31927 / WID-SEC-2025-2229) VulDB Updates1 hour agoCVE-2023-53685 | Linux Kernel up to 6.1.29/6.3.3 write memory leak (Nessus ID 297598 / WID-SEC-2025-2229)

Mehr aus dieser Kategorie

ZDI-26-832: AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability
28.10.2026
ZDI-26-833: Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability
28.10.2026
ZDI-26-831: Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability
28.10.2026
ZDI-26-830: Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability
28.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag