/
vendors:A* × has_exploit:true × latest_source_host:gbhackers.com × limpar

Resultados

3 casos · pág. 1/1

gbhackers.com · · 28 fontes · 44 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation
gbhackers.com · · 2 fontes · 2 atualizações exploit público medium

Chinese-speaking actor abuses Flowise honeypot to harvest secrets and use its LLM agent for recon against a gambling network's Nightingale server

In late August 2026, Sekoia TDR observed an attacker interact with an unauthenticated Flowise honeypot emulating v2.2.8. The attacker enumerated chatflows and stored credentials, created a rogue "System Status" chatflow with a callback to attacker infrastructure (154.217.251.226), and used prompt injection to turn the LLM agent into an of…

CVE-2025-59528 CVE-2026-41264 CVE-2024-31621 gambling ai_platforms
gbhackers.com · exploit público critical

INC and The Gentlemen ransomware affiliates leak AI-assisted intrusion ops: 8,257 Claude messages, 46 INC encryptor builds, 62 victims

SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…

CVE-2026-35616 CVE-2024-57727 CVE-2026-41940 INC Ransom The Gentlemen managed service providers finance