Search: “Payload CMS”

45 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 45 Malware 31 Ransomware 17 Exploit / PoC 12 Threat actor 11 Data breach 7 Phishing & fraud 2 Policy & legal 1 Advisory 1 Tools 1

SeverityAll critical 50 high 56 medium 19 low 2 info 1

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

The Hacker NewsJun 2, 10:07 UTC · Jun 2, 2025Vulnerability CVE-2025-32432 CVE-2021-44228 CVE-2022-26134+1 CVEs

47

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

The Hacker NewsApr 6, 06:40 UTC · Apr 6, 2026Vulnerability1

42

Attackers chained Craft CMS zero

Security AffairsApr 28, 08:35 UTC · Apr 28, 2025Vulnerability CVE-2025-32432 CVE-2024-58136

47

PolyShell: unrestricted file upload in Magento and Adobe Commerce

Sansec (Magento / e-commerce security)May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild

60

Mass PolyShell attack wave hits 471 stores in one hour

Sansec (Magento / e-commerce security)Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-75650

60

“Keeper” Magecart Group Infects 570 Sites

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

30

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Security AffairsMay 25, 18:07 UTC · May 25, 2026Vulnerability in the wildCVE-2026-26980

60

PHP-CGI RCE Flaw Exploited in Attacks on Japan's Tech, Telecom, and E

The Hacker NewsMar 7, 05:42 UTC · Mar 7, 2025Vulnerability CVE-2024-4577

47

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

42

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-30777 CVE-2023-30177 CVE-2023-31144+1 CVEs

60

CVE-2019-6342 flaw allows hackers to compromise Drupal 8.7.4 websites

Security AffairsJul 18, 09:34 UTC · Jul 18, 2019Vulnerability CVE-2019-6342 CVE-2019-6340

60

Magecart Group 8 skimmed card info from 570+ online shops

Help Net SecurityJul 8, 00:00 UTC · Jul 8, 2020Vulnerability

42

VexTrio: The Uber of Cybercrime

The Hacker NewsJan 29, 03:44 UTC · Jan 29, 2024Vulnerability

30

Review: Acunetix 11

Help Net SecuritySep 20, 21:41 UTC · Sep 20, 2017Vulnerability

30

CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flaw

Security AffairsApr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602 CVE-2018-7600 CVE-2017-10271

60

Vulnerability Spotlight: XSS vulnerability in Ghost CMS

Cisco TalosJan 19, 20:01 UTC · Jan 19, 2023Vulnerability in the wildCVE-2022-47194 CVE-2022-47197

60

China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload

The RecordNov 13, 03:38 UTC · Nov 13, 2024Vulnerability

30

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

New WordPress Flaw Lets Unauthenticated Remote Attackers Hack Sites

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2019Vulnerability

55

Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2018Vulnerability CVE-2018-7600

60

Researchers Detail Severe "Super FabriXss" Vulnerability in Microsoft Azure SFX

The Hacker NewsMar 30, 17:02 UTC · Mar 30, 2023Vulnerability CVE-2023-23383 CVE-2022-35829

60

OpenSSL Releases Patch For "High" Severity Vulnerability

The Hacker NewsNov 10, 18:03 UTC · Nov 10, 2016Vulnerability CVE-2016-7054 CVE-2016-7053 CVE-2016-7055

35

New malicious web shell from the Tropic Trooper group is found in the Middle East

Kaspersky SecurelistSep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473 CVE-2021-34523 CVE-2021-31207+1 CVEs

60

CMS Provider Sitecore Patches Exploited Critical Zero Day

Infosecurity MagazineSep 4, 13:30 UTC · Sep 4, 2025Vulnerability CVE-2025-53690

60

Critical auth bypass issues affect InfiniteWP Client and WP Time Capsule WordPress plugins

Security AffairsJan 16, 08:14 UTC · Jan 16, 2020Vulnerability

55

Kaspersky report on APT trends in Q3 2024

Kaspersky SecurelistNov 28, 10:00 UTC · Nov 28, 2024Vulnerability1

42

100+ Online Shops Compromised With Payment Data-Stealing Code

Help Net SecurityNov 13, 10:44 UTC · Nov 13, 2024Vulnerability

30

Ongoing Xurum attacks target Magento 2 e

Security AffairsAug 14, 17:46 UTC · Aug 14, 2023Vulnerability CVE-2022-24086 CVE-2016-5195

47

Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan

Cisco TalosOct 25, 12:01 UTC · Oct 25, 2023Vulnerability1

30

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

The Hacker NewsMay 31, 04:11 UTC · May 31, 2022Vulnerability CVE-2022-22954 CVE-2022-1388 CVE-2022-22947+5 CVEs

47

Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners

The Hacker NewsApr 18, 09:50 UTC · Apr 18, 2018Vulnerability in the wildCVE-2018-7600 CVE-2017-10271

60

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

The Hacker NewsApr 5, 07:20 UTC · Apr 5, 2023Vulnerability in the wildCVE-2023-23383

60

Digital skimmer hits global supermarket chain

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wild

57

WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors

The Hacker NewsApr 28, 08:06 UTC · Apr 28, 2025Vulnerability

55

CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices

The Hacker NewsMar 29, 03:45 UTC · Mar 29, 2025Vulnerability in the wildCVE-2019-9874 CVE-2019-9875 CVE-2020-8515+2 CVEs

60

Balada Injector continues to infect thousands of WordPress sites

Security AffairsJan 15, 10:11 UTC · Jan 15, 2024Vulnerability CVE-2023-6000

47

High-Severity Vulnerability Discovered in Popular CMS

Infosecurity MagazineSep 6, 11:30 UTC · Sep 6, 2023Vulnerability in the wildCVE-2023-2453 CVE-2023-4480

60

SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2025-542362

60

DarkMoon: Open-source AI pentesting platform

Help Net SecurityJun 29, 00:00 UTC · Jun 29, 2026Vulnerability

30