/
vendors:"Recorded Future" × has_exploit:true × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · exploit público high

Silent Lynx (UAT-6275) uses WinRAR CVE-2025-8088 and reverse shells against CIS government targets

Silent Lynx, tracked as UAT-6275 by Cisco Talos and TAG-193 by Recorded Future Insikt Group, has been linked to a new set of attacks on government organizations across the Commonwealth of Independent States. The activity ran from June 2025 through August 2026 and used four infection chains to deploy custom reverse shells (FoalShell, Chvos…

CVE-2025-8088 CVE-2025-25257 Silent Lynx UAT-6275 government energy
gbhackers.com · · 28 fontes · 44 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation