The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild.... Weiterlesen: PHP2Shell plus Fragnesia: A dangerous new route from web server to root
Intelligence View
⚡ tsecurity.de Intelligence
PHP2Shell plus Fragnesia: A dangerous new route from web server to root
The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
29 Kaynaklar
CVE-2022-48192 | Softing smartLink SW-HT up to 1.29 cross site scripting (EUVD-2022-50903)
28 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2022-48193 | Softing smartLink SW-HT up to 1.29 inadequate encryption (EUVD-2022-50904) VVulDB Updatesvor 2 Std.CVE-2024-13362 | Spotlight Social Feeds Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Embedder for Google Reviews Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Mapster WP Maps Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Justified Gallery Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | AI Puffer Plugin on WordPress Parameter url cross site scripting
+22
17 Kaynaklar
CVE-2025-39756 | Linux Kernel up to 6.16.1 mm/slub.c kvmalloc_array file descriptor consumption (EUVD-2025-28956 / Nessus ID 264737)
16 diğer kaynaklar
VVulDB Updatesvor 3 Std.CVE-2025-39758 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 do_tcp_sendpages allocation of resources (Nessus ID 264695 / WID-SEC-2025-2040) VVulDB Updatesvor 3 Std.CVE-2025-39757 | Linux Kernel up to 6.17-rc1 ALSA allocation of resources (EUVD-2025-28955 / Nessus ID 264722) VVulDB Updatesvor 3 Std.CVE-2025-39759 | Linux Kernel up to 6.16.1 btrfs_ioctl_quota_rescan use after free (EUVD-2025-28953 / Nessus ID 264768) CCyber Security Newsvor 3 Std.CISA Warns of Linux Kernel Missing Initialization Vulnerability Exploited in Attacks VVulDB Updatesvor 5 Std.CVE-2025-39744 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 rcu_read_unlock state issue (Nessus ID 264771 / WID-SEC-2025-2040) VVulDB Updatesvor 5 Std.CVE-2025-39746 | Linux Kernel up to 6.12.42/6.15.10/6.16.1 wifi ath10k_pci denial of service (Nessus ID 264741 / WID-SEC-2025-2040)
+10
12 Kaynaklar
CVE-2026-119272 | Google Chrome up to 156.0.8078.73 FileSystem out-of-bounds (EUVD-2026-113441)
11 diğer kaynaklar
VVulDB Updatesvor 5 Std.CVE-2026-119271 | Google Chrome up to 156.0.8078.73 Skia use after free (EUVD-2026-113440) VVulDB Updatesvor 5 Std.CVE-2026-119270 | Google Chrome up to 156.0.8078.73 CacheStorage input validation (EUVD-2026-113439) VVulDB Updatesvor 5 Std.CVE-2026-119269 | Google Chrome up to 156.0.8078.73 Blink use after free (EUVD-2026-113438) VVulDB Updatesvor 5 Std.CVE-2026-119267 | Google Chrome up to 156.0.8078.73 DOM memory corruption (EUVD-2026-113436) VVulDB Updatesvor 5 Std.CVE-2026-119265 | Google Chrome up to 156.0.8078.73 Quota memory corruption (EUVD-2026-113434) VVulDB Updatesvor 5 Std.CVE-2026-119266 | Google Chrome up to 156.0.8078.73 Quota use after free (EUVD-2026-113435)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4307864/guevenlik-aklar-cve/php2shell-plus-fragnesia-a-dangerous-new-route-from-web-server-to-root/