vendors:Upwind × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

theregister.com · há 13h · 5 fontes · 5 atualizações critical

LiteLLM 1.107.0 trojanized on PyPI and Docker images via stolen GitHub tokens: infostealer and RCE backdoor through Python startup hooks

The LiteLLM release 1.107.0 (a widely used open source LLM proxy and AI gateway developed by BerriAI, about 23 million weekly downloads per theregister.com) was trojanized on PyPI on 21 October 2026 and carries a credential stealer (privcollect) plus a remote code execution backdoor. All wheels (Linux, macOS, Windows) drop three extra fil…

technology software

gbhackers.com · há 1h · 25 fontes · 29 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; exploitation attempts seen from Oct 17

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation