vendors:VirusTotal × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · há 1h · 5 fontes · 6 atualizações critical

Plex2Shell: Plex Media Server exploit chain exploited within a day of PoC to drop XMRig and myawesomeproxy; CISA adds four CVEs to KEV

Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656), on October 17, 2026. That was about a day after researcher Zach Main published a write-up on October 16, with a PoC following (bleepingcomputer.com dates the PoC to October 19, three da…

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 government

security.paloaltonetworks.com · há 3h · 21 fontes · 22 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619 as exploitation attempts begin

The PHP security team released emergency fixes on October 21, 2026 at 14:00 UTC for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials a…

CVE-2026-109618 CVE-2026-109619 government transportation