initial_access_vector:exploit_public_facing × cves:CVE-2026-63030 × criticity:critical × has_exploit:true × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · há 3d · 2 fontes · 2 atualizações exploit público critical

wp2shell: WordPress core REST batch route confusion (CVE-2026-63030) and WP_Query SQLi (CVE-2026-60137) chain into unauthenticated RCE

Hacktron analyzes wp2shell, an unauthenticated RCE chain in WordPress core found by Searchlight Cyber. It combines CVE-2026-63030, a route handler confusion in the REST API batch endpoint, with CVE-2026-60137, an SQL injection in WPQuery. Affected versions are WordPress 6.9.0-6.9.4, 7.0.0-7.0.1 and the 7.1 beta, fixed in 6.9.5, 7.0.2 and …

CVE-2026-63030 CVE-2026-60137 CVE-2018-14028

thehackernews.com · há 2h exploit público critical

Russian-Speaking INC and The Gentlemen Ransomware Affiliates Use Phantom AI Agent Framework to Breach 62 Organizations

SOCRadar researchers analyzed an exposed directory at 45.227.254.43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and …

CVE-2024-57727 CVE-2026-35616 CVE-2026-41940 INC The Gentlemen industrial manufacturing