EILMELDUNGEN LIVE

YouTube Security VideosVisual Studio Code: Introducing PostgreSQL Like A Pro: VS Code Edition | Teaser(20.10.2026 um 21:47 Uhr)

•

Web Security TippsGoogle Workspace Weekly Recap - October 23, 2026(23.10.2026 um 23:06 Uhr)

•

Unix & Linux ServerPHP2Shell im Homelab: QNAP, Nextcloud und OPNsense jetzt prüfen - Notebookcheck(23.10.2026 um 22:04 Uhr)

•

Sicherheitslücken (CVE)CVE-2022-47740 | Seltmann Content Management System 6 /index.php sql injection (EUVD-2022-50499)(23.10.2026 um 23:43 Uhr)

•

Sicherheitslücken (CVE)CVE-2022-47757 | imo.im 2022.11.1051 Shared Library path traversal (GHSA-ghf9-x3c5-3mwj / EUVD-2022-50515)(23.10.2026 um 23:43 Uhr)

•

Sicherheitslücken (CVE)CVE-2022-47745 | EasyCorp ZenTao PMS up to 18.0.beta1 sql injection (Issue 106 / EUVD-2022-50504)(23.10.2026 um 23:43 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-75525 | open-reception appointment-booking-software up to 2.1.0 improper authorization (EUVD-2026-109159)(23.10.2026 um 23:51 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-91446 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure privileges management (EUVD-2026-106696)(23.10.2026 um 23:51 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-115800 | UbiquitousLearning mllm up to 2.0.2 Convertor __init__.py load_model shard_file path traversal (Issue 711 / EUVD-2026-109158)(23.10.2026 um 23:51 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-91444 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure privileges management (EUVD-2026-106694)(23.10.2026 um 23:51 Uhr)

•

YouTube Security VideosVisual Studio Code: Introducing PostgreSQL Like A Pro: VS Code Edition | Teaser(20.10.2026 um 21:47 Uhr)

•

Web Security TippsGoogle Workspace Weekly Recap - October 23, 2026(23.10.2026 um 23:06 Uhr)

•

Unix & Linux ServerPHP2Shell im Homelab: QNAP, Nextcloud und OPNsense jetzt prüfen - Notebookcheck(23.10.2026 um 22:04 Uhr)

•

Sicherheitslücken (CVE)CVE-2022-47740 | Seltmann Content Management System 6 /index.php sql injection (EUVD-2022-50499)(23.10.2026 um 23:43 Uhr)

•

Sicherheitslücken (CVE)CVE-2022-47757 | imo.im 2022.11.1051 Shared Library path traversal (GHSA-ghf9-x3c5-3mwj / EUVD-2022-50515)(23.10.2026 um 23:43 Uhr)

•

Sicherheitslücken (CVE)CVE-2022-47745 | EasyCorp ZenTao PMS up to 18.0.beta1 sql injection (Issue 106 / EUVD-2022-50504)(23.10.2026 um 23:43 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-75525 | open-reception appointment-booking-software up to 2.1.0 improper authorization (EUVD-2026-109159)(23.10.2026 um 23:51 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-91446 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure privileges management (EUVD-2026-106696)(23.10.2026 um 23:51 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-115800 | UbiquitousLearning mllm up to 2.0.2 Convertor __init__.py load_model shard_file path traversal (Issue 711 / EUVD-2026-109158)(23.10.2026 um 23:51 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-91444 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure privileges management (EUVD-2026-106694)(23.10.2026 um 23:51 Uhr)

•

Intelligence View

⚡ tsecurity.de Intelligence

php2shell open-dir toolkit: a cloned PoC, staged webshells, and a ranked target list

We pulled the tooling operators staged in open directories after the php2shell leak. One workspace held a cloned php2shell PoC alongside ready-to-drop PHP…

Malware / Trojaner / Viren Post malware and hostile servers for others to analyze 22.10.2026, 19:47 Uhr 1 Min. Lesezeit TA0011 · T1505

BeitragSeite↗ Quelle (Post malware and hostile servers for others to analyze)

We pulled the tooling operators staged in open directories after the php2shell leak. One workspace held a cloned php2shell PoC alongside ready-to-drop PHP backdoors: shell.php pulling a payload from maste.mangsud[.]org, autologin_fd.php, and a set of tebaran_* CMS deployers. No php2shell victim was recorded on that host. A separate operator built... Weiterlesen: php2shell open-dir toolkit: a cloned PoC, staged webshells, and a ran…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

MITRE ATT&CK Matrix Navigator

1 belegte Technik

T1505TA0011 · Command and Control

Server Software Component

Mitigation: M1018 User Account Management

Quelle: Kontext-Klassifikation des Artikeltextes

YARA LOKI php-malware-finder

Command and Control

CTI Threat Relationship Graph

Akteure · Techniken · Beziehungen

3 Knoten · 2 Relationen

CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC

Powered by tsecurity.de Hub

🚀 Auf tsecurity.de entdecken

Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Noch keine Leser-Bewertungen

War diese Seite hilfreich?

Powered by tsecurity.de Hub

🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

16 Quellen

CVE-2026-63848 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm/amdgpu/jpeg Local Privilege Escalation

15 weitere Quellen

VulDB Updates4 uur geledenCVE-2026-63887 | Linux Kernel up to 7.0.11 SCSI Target iSCSI iscsi_encode_text_output heap-based overflow (Nessus ID 334954) VulDB Updates4 uur geledenCVE-2026-63844 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Amdgpu Jpeg drm/amdgpu/jpeg unusual condition VulDB Updates4 uur geledenCVE-2026-63860 | Linux Kernel up to 7.0.9 RDMA Core nla_strcmp null termination VulDB Updates4 uur geledenCVE-2026-63886 | Linux Kernel up to 7.0.11 Iscsi chap_server_compute_hash chap_r allocation of resources (Nessus ID 340744) VulDB Updates4 uur geledenCVE-2026-63850 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 Vcn Encoder drm/amdgpu/vcn VulDB Updates4 uur geledenCVE-2026-63849 | Linux Kernel up to 6.18.32/7.0.9 Vcn Encoder drm/amdgpu/vcn set_no_user_fence

+9

↗ Analyse öffnen

7 Quellen

Security: Ausführen beliebiger Kommandos in postgresql18-pgvector (Red Hat)

6 weitere Quellen

Pro-Linux2 uur geledenSecurity: Ausführen beliebiger Kommandos in podman (Red Hat) Pro-Linux2 uur geledenSecurity: Ausführen beliebiger Kommandos in postgresql16-pgvector (Red Hat) Pro-Linux Security3 uur geledenAusführen beliebiger Kommandos in postgresql18-pgvector (Red Hat) Pro-Linux Security3 uur geledenAusführen beliebiger Kommandos in postgresql16-pgvector (Red Hat) Pro-Linux Security3 uur geledenAusführen beliebiger Kommandos in podman (Red Hat) Pro-Linux18 uur geledenSecurity: Ausführen beliebiger Kommandos in socat (Fedora)

↗ Analyse öffnen

7 Quellen

CVE-2022-47698 | Comfast CF-WR623N 2.3.0.1 URL Filtering cross site scripting (EUVD-2022-50457)

6 weitere Quellen

VulDB Updates5 uur geledenCVE-2022-47699 | Comfast CF-WR623N 2.3.0.1 access control (EUVD-2022-50458) VulDB Updates5 uur geledenCVE-2022-47700 | Comfast CF-WR623N up to 2.3.0.1 improper authentication (EUVD-2022-50459) VulDB Updates5 uur geledenCVE-2022-47701 | Comfast CF-WR623N 2.3.0.1 cross site scripting (EUVD-2022-50460) VulDB Updates8 uur geledenCVE-2025-9823 | Mautic up to 4.4.16/5.2.7/6.0.4 ajax?action=lead:addLeadTags cross site scripting VulDB Updates8 uur geledenCVE-2025-58351 | Outline up to 0.83.x cross site scripting (GHSA-gcj7-c9jv-fhgf) VulDB Updates7 uur geledenCVE-2022-47697 | Comfast CF-WR623N up to 2.3.0.1 password recovery (EUVD-2022-50456)

↗ Analyse öffnen

◀ VORHERIGER BEITRAG 1 Min

Amazon renames Kindle Unlimited to Kindle Plus and expands access to audiobooks

NÄCHSTER BEITRAG 1 Min

What Global Data Tells Us About the Economics of IXPs

IT NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Trek om te vernieuwen

Nächster Beitrag

🔥 LIVE PULSE

gerade eben

tsecurity.de Live Threat Radar

Aktuelle Bedrohungslagen & Sicherheits-Analysen

Quelle besuchen Jetzt ansehen