/
countries:France × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 25 fontes · 29 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; exploitation attempts seen from Oct 17

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation
gbhackers.com · high

Midnight Mimosa: Preinstalled Android Firmware Malware Turns Low-Cost Phones into Ad-Fraud Bots and Potential Proxy Nodes

Bitdefender documented Midnight Mimosa, an Android malware campaign that embeds a platform-signed malicious system app in the firmware of low-cost, MediaTek-based handsets and counterfeit flagship models before they reach buyers. Thousands of infected devices were observed in more than 150 countries over roughly two years. The implant dri…

consumer