Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of…

TA0001 · T1190 Cloud & IT-Enterprise

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

PHP2Shell: KI macht alte PHP-Sicherheitslücken für RCE praktisch ausnutzbar

LONDON (IT BOLTWISE) – Wiz beschreibt eine neue Angriffsstrategie namens PHP2Shell, die auf Speicherfehler im PHP-Kern abzielt.

TA0001 · T1190 Sicherheitslücken (CVE) 95%

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

GitLab schließt kritische Regex-Lücke (CVSS 10.0) für Self-Managed RCE

LONDON (IT BOLTWISE) – GitLab hat am 21. Oktober eine kritische Schwachstelle behoben, die in Self-Managed-Installationen eine Remote-Code-Ausführung…

TA0001 · T1190 KRITIS / Energie Sicherheitslücken (CVE) 75%

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) SecurityWeek

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.

TA0001 · T1190 IT Security Nachrichten 65%

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

Notfall-Patches für PHP2Shell: kritische RCE-Lücken mit CVE-2026-109618/109619

LONDON (IT BOLTWISE) – PHP hat Notfall-Updates veröffentlicht, die zwei kritische RCE-Lücken im PHP-Runtime-Engine-Fundament schließen, bekannt als…

🛡️ CVE-2026-109618 EPSS 11.6% TA0001 · T1190 KRITIS / Energie +1

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) Cisco Talos Blog

Two critical RCEs in PHP core

Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain…

TA0001 · T1190 Cloud & IT-Enterprise

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) BleepingComputer

PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and…

EPSS 11.6% TA0001 · T1190 Cloud & IT-Enterprise Sicherheitslücken (CVE) 75%

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) LWN.net

PHP patches released for two critical RCEs

The PHP project has published PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.

TA0001 · T1190

vor 7 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

PHP2Shell: Was wirklich gegen die PHP-RCE-Lücken vor dem Fix hilft

LONDON (IT BOLTWISE) – Vor dem PHP-Fix gegen die „PHP2Shell“-Sicherheitslücken reicht eine einzelne Konfigurationsänderung nicht aus, sagt eine…

TA0001 · T1190 Sicherheitslücken (CVE) 65%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) Security Affairs

US Government Orders DeepSeek Out of Federal Civilian Systems

PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S.

TA0001 · T1190 Gov & Defense Cloud & IT-Enterprise Kat #Workaround / Mitigation 65%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) The Hacker News

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not…

TA0001 · T1190 Cloud & IT-Enterprise Kat #Workaround / Mitigation 95%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) Cyber Security News

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public Exploit Code

A newly released public proof-of-concept exploit code for CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability that enables unauthenticated…

🛡️ Security Fix TA0001 · T1190 Sicherheitslücken (CVE) 85%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) Patchstack Blog

Major security alert: PHP vulnerable to critical RCE, attacks ongoing

Attacks are already under way: Patchstack has received reports of active exploitation from multiple hosting partners.

TA0001 · T1190 Cloud & IT-Enterprise Server Security 75%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE)

IT Security News Hourly Summary 2026-10-21 08h : 9 posts

9 posts published in the last hour 05:32PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.

TA0001 · T1190 Cloud & IT-Enterprise IT Security Nachrichten 75%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) GBHackers Security

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0.

TA0001 · T1190 IT Security Tools 65%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) Exploit-DB.com RSS Feed

[webapps] Open eClass 3.15 - RCE

TA0001 · T1190

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) infosecurity-magazine.com

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned

TA0001 · T1190 IT Security Nachrichten 65%

vor 8 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) Cyber Security News

Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication

Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without…

🛡️ Security Fix TA0001 · T1190 Sicherheitslücken (CVE) 85%

vor 9 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) SecurityWeek

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.

TA0001 · T1190 Cloud & IT-Enterprise

vor 9 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

Cybersecurity-Roundup: Jobs, ConnectWise-Stop, Drupal-RCE und ein Zero-Day

LONDON (IT BOLTWISE) – Der aktuelle Cybersecurity-Überblick zeigt gleich mehrere operative Brennpunkte: Im Jobmarkt sinken die Gesamtanzeigen…

🛡️ Security Fix TA0001 · T1190 Cloud & IT-Enterprise Sicherheitslücken (CVE) 65%

vor 9 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

Unsecured MCP-Server zu Hause: STDIO-Warnung und RCE-Risiken

LONDON (IT BOLTWISE) – Ein Security-Scan hat mehrere tausend öffentlich erreichbare MCP-Server aus privaten Umgebungen aufgedeckt.

TA0001 · T1190 Sicherheitslücken (CVE) 90%

vor 10 Tagen 1 Min

Czytaj więcej

Luki w bezpieczeństwie (CVE)

Hak5: Hackers Turned GitHub Against Its Own Users | Threat Wire

How are hackers exploiting GitHub Actions to steal credentials and secrets from hundreds of repositories in a growing supply chain…

Sicherheitslücken (CVE) 97%

vor 10 Tagen 1.4k Views

Czytaj więcej

Luki w bezpieczeństwie (CVE) Google Alert

Drupal schließt zwei kritische RCE-Lücken, Update vor den Exploits einspielen

Patches: 10.6.19, 11.3.19, 11.4.10. Jetzt aktualisieren. Meistgelesen · Cybersicherheit ...

TA0001 · T1190 KRITIS / Energie Sicherheitslücken (CVE) 92%

vor 10 Tagen 1 Min

Czytaj więcej

Pobierz więcej postów 36

Aktywacja automatycznego ładowania bez końca

Strona 3 od 52 & bull; Razem: 1.847 Artykuł

Brak zapisanych artykułów.
Kliknij przy wiadomości, aby ją dodać.

🚀 Auf tsecurity.de entdecken

Beliebte Cybersicherheit Themen letzte 48 Std.

⚡ tsecurity.de Intelligence

Odkryj wszystkie trendy na tsecurity.de

aside#sidebarCollapse-col-right.collapse { display: block !important; } aside#sidebarCollapse-col-right .sidebar-placeholder { display: none; } aside#sidebarCollapse-col-right .sidebar-content { display: block !important; }

🕒 tsecurity.de Such-Trends & Chronologie

Sicherheitslücken (CVE)

SonicWall SMA1000: Kritische SSRF-Lücke & RCEs behoben - Security-Insider

CVE-2026-115351 | Lepture Mistune up to 3.2.x Figure Directive figwidth cross site scripting (EUVD-2026-108420)

CVE-2026-114608 | pylint-dev Pylint up to 4.0.8 Module Statistics Cache pickle.load deserialization (EUVD-2026-108257)

CVE-2026-75508 | graphql-python graphql-core up to 3.2.11 Parser Parser.advance_lexer allocation of resources (EUVD-2026-108225)

CVE-2026-61791 | schorschii OCO-Server up to 1.2.0 HTML Escaping lib/Html.class.php Html::commandButton hostname HTML injection (EUVD-2026-108209)

CVE-2026-115249 | subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578 Appointment Booking patappointtime.php day/time/appdate input validation (Issue 11 / EUVD-2026-108183)

Filtry i sortowanie

Starszy

Critical PHP RCE Vulnerabilities: Update to PHP 8.5.12, 8.4.27 Immediately

PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution

Investigating the Return of the PHP2Shell Nightmare

Special Report: PHP2Shell puts 70% of web at risk

Two critical PHP flaws put the web on alert as emergency patches arrive

PHP2Shell: KI macht alte PHP-Sicherheitslücken für RCE praktisch ausnutzbar

GitLab schließt kritische Regex-Lücke (CVSS 10.0) für Self-Managed RCE

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

Notfall-Patches für PHP2Shell: kritische RCE-Lücken mit CVE-2026-109618/109619

Two critical RCEs in PHP core

PHP ships emergency patches for critical PHP2Shell flaws

PHP patches released for two critical RCEs

PHP2Shell: Was wirklich gegen die PHP-RCE-Lücken vor dem Fix hilft

US Government Orders DeepSeek Out of Federal Civilian Systems

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public Exploit Code

Major security alert: PHP vulnerable to critical RCE, attacks ongoing

IT Security News Hourly Summary 2026-10-21 08h : 9 posts

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

[webapps] Open eClass 3.15 - RCE

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Cybersecurity-Roundup: Jobs, ConnectWise-Stop, Drupal-RCE und ein Zero-Day

Unsecured MCP-Server zu Hause: STDIO-Warnung und RCE-Risiken

Hak5: Hackers Turned GitHub Against Its Own Users | Threat Wire

Drupal schließt zwei kritische RCE-Lücken, Update vor den Exploits einspielen

Sicherheitslücken (CVE)

Starszy

ANALYST WORKBENCH

Jak działa rejestracja biuletynu?

W jaki sposób newsletter się usuwa?