/
researchers:Hunt.io × limpar

Resultados

2 casos · pág. 1/1

olhardigital.com.br · high

AI-driven vulnerability discovery doubles; PHP flaw forces European government sites offline amid exploitation attempts

AI is accelerating vulnerability discovery and shrinking the window defenders have to patch, according to experts cited by Reuters via olhardigital.com.br. A forthcoming VulnCheck study reportedly finds the number of discovered flaws has doubled year over year. This week, newly disclosed vulnerabilities in PHP forced operators to rush fix…

theregister.com · · 31 fontes · 49 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline; separate unpatched CVE-2026-115560 disclosed

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…