I wrote about Log4Shell when it broke in December 2021. The lesson then was how much of the modern web rests on open-source code that nobody fully sees. Related: Log4j’s big lesson PHP2Shell teaches that lesson again, with a twist. Log4Shell was found the old-fashioned way, by a human researcher at Alibaba’s cloud security team. This time, the... Weiterlesen: SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is mor…
Intelligence View
⚡ tsecurity.de Intelligence
SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire
I wrote about Log4Shell when it broke in December 2021. The lesson then was how much of the modern web rests on open-source code that nobody fully sees.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
9 źródeł
CVE-2026-53613 | Linux util-linux mount toctou (Nessus ID 374940)
8 kolejnych źródeł
VVulDB Updatesvor 2 Std.CVE-2026-53612 | Linux util-linux Mount mount toctou (Nessus ID 374940) VVulDB Updatesvor 2 Std.CVE-2026-53614 | Linux util-linux mount privileges management (Nessus ID 374940) VVulDB Updatesvor 1 Std.CVE-2026-99239 | Linux Kernel up to 7.3.0 L2CAP __l2cap_chan_add toctou (EUVD-2026-115281) VVulDB Updatesvor 52 Min.CVE-2026-53615 | util-linux up to 2.41.3 libblkid dos.c parse_dos_extended integer overflow (Nessus ID 374940) VVulDB Updatesvor 52 Min.CVE-2026-72083 | Linux Kernel up to 7.2-rc3 SCSI Target Core core_scsi3_emulate_pro_register_and_move use after free (Nessus ID 374938) VVulDB Updatesvor 52 Min.CVE-2026-74283 | Linux Kernel up to 7.1.4 tipc netlink_net_capable permission (Nessus ID 374938)
+2
9 źródeł
CVE-2026-99241 | Linux Kernel up to 7.2.13 NTFS ntfs_filemap_page_mkwrite race condition (EUVD-2026-115283)
8 kolejnych źródeł
VVulDB Updatesvor 1 Std.CVE-2026-99240 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Damon Core mm/damon/core.c damos_commit_quota_goal target_value divide by zero (EUVD-2026-115282) VVulDB Updatesvor 1 Std.CVE-2026-99237 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 tracing update_last_data_if_empty race condition (EUVD-2026-115279) VVulDB Updatesvor 1 Std.CVE-2026-99238 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Tracing trace_module_record locking (EUVD-2026-115280) VVulDB Updatesvor 1 Std.CVE-2026-99235 | Linux Kernel up to 7.3.0 Tracing event_hist_trigger_free use after free (EUVD-2026-115277) VVulDB Updatesvor 1 Std.CVE-2026-99236 | Linux Kernel up to 7.3.0 tracing predicate_parse out-of-bounds (EUVD-2026-115278) VVulDB Updatesvor 1 Std.CVE-2026-99233 | Linux Kernel up to 7.3.0 Histograms event_hist_trigger_parse/hist_unreg_all event_call/ref use after free (EUVD-2026-115275)
+2
8 źródeł
GitHub Release: element-hq/synapse v1.164.2 (02.11.2026)
7 kolejnych źródeł
GGitHubvor 3 Std.GitHub Release: dependabot/dependabot-core v0.403.0 (02.11.2026) GGitHubvor 48 Min.GitHub Release: trufflesecurity/trufflehog v3.99.8 (02.11.2026) GGitHubvor 2 Std.GitHub Release: Security-Onion-Solutions/securityonion v3.4.0-20261102 (02.11.2026) GGitHubvor 3 Std.GitHub Release: NousResearch/hermes-agent vrc.3-v0.22.6 (02.11.2026) GGitHubvor 2 Std.GitHub Release: NousResearch/hermes-agent v0.22.6 (02.11.2026) GGitHubvor 4 Std.GitHub Release: microsoft/PowerToys v0.103.3052 (02.11.2026)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4303485/wiadomoci-o-bezpieczestwie-it/shared-intel-qa-php2shell-is-no-log4shell-open-source-flaw-is-more-warning-than-wildfire/