EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646)(01.11.2026 um 22:59 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)(01.11.2026 um 22:59 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Analyzing php2shell toolkits from exposed open directories: ASLR-bypass kit, custom heap exploit, PAN-OS repackaging

Breakdown of the php2shell tooling we pulled from live open directories. A shared ASLR-bypass kit was byte-identical across four hosts, with the operators' own…

Malware & Threat Intel Post malware and hostile servers for others to analyze 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (Post malware and hostile servers for others to analyze)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Breakdown of the php2shell tooling we pulled from live open directories. A shared ASLR-bypass kit was byte-identical across four hosts, with the operators' own lab logs showing execution as www-data. One operator wrote its own heap exploit and shipped a log cleaner. A PAN-OS-focused repackaging was exposed at 130.94.67[.]235, including... Weiterlesen: Analyzing php2shell toolkits from exposed open directories: ASLR-bypa…

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

7 sources
CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)
6 more sources
tsecurity.de9 min. agoCVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597) tsecurity.de9 min. agoCVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598) tsecurity.de9 min. agoCVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599) tsecurity.de9 min. agoCVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646) tsecurity.de9 min. agoCVE-2026-116548 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress optionals cross site scripting (EUVD-2026-114612) tsecurity.de9 min. agoCVE-2026-118070 | Welcart E-Commerce Plugin up to 2.12.5 on WordPress gid cross site scripting (EUVD-2026-114609)

Mehr aus dieser Kategorie

Apple meldet Kompromittierung von Geräten durch Spyware
01.11.2026
Spyware: Regierungsmitglieder womöglich von Hacker-Angriff betroffen - Retail-News.de
01.11.2026
Berlin: Hacker-Angriff auf Handys deutscher Politiker - B.Z.
01.11.2026
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121
01.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag