Search: “PHP”

177 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 397 Malware 310 Exploit / PoC 182 Ransomware 139 Threat actor 79 Data breach 55 Phishing & fraud 36 Industry 19 Advisory 9 Research 7 AI safety & security 6 Tools 5 Policy & legal 5 AI tools & infra 5

SeverityAll critical 477 high 458 medium 261 low 40 info 20

Pwn2Own Automotive 2025 Day 2: organizers awarded $335,500

Security AffairsJan 23, 20:48 UTC · Jan 23, 2025Exploit / PoC

60

Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero

Security AffairsJan 22, 22:01 UTC · Jan 22, 2025Exploit / PoC

60

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

The Hacker NewsDec 12, 10:02 UTC · Dec 12, 2024Exploit / PoC CVE-2024-11972 CVE-2024-50498 CVE-2024-11205

60

Critical Flaw in ProjectSend Under Active Exploitation Against Public

The Hacker NewsDec 5, 04:45 UTC · Dec 5, 2024Exploit / PoC in the wildCVE-2024-11680

60

Pwn2Own Ireland 2024 Day 2: participants demonstrated an exploit against Samsung Galaxy S24

Security AffairsOct 24, 20:53 UTC · Oct 24, 2024Exploit / PoC

60

Critical LiteSpeed Cache Plugin Flaw Exposes WordPress Sites

Infosecurity MagazineAug 21, 16:30 UTC · Aug 21, 2024Exploit / PoC

60

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild1

60

Network Attack Trends: February

Palo Alto Unit 42Jun 6, 12:33 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-25296 CVE-2021-25297 CVE-2021-25298+4 CVEs

60

Attackers Are Taking Advantage of the Open-Source Service Interactsh for Malicious Purposes

Palo Alto Unit 42Jun 6, 01:14 UTC · Jun 6, 2024Exploit / PoC CVE-2017-9506 CVE-2017-12629 CVE-2019-2767+23 CVEs

60

Network Security Trends: August

Palo Alto Unit 42Jun 6, 00:57 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-40438 CVE-2021-34473 CVE-2021-38647+9 CVEs

60

CISA adds ownCloud and Google Chrome bugs to its Known Exploited Vulnerabilities catalog

Security AffairsDec 1, 11:04 UTC · Dec 1, 2023Exploit / PoC in the wildCVE-2023-6345 CVE-2023-49103 CVE-2023-5217

60

CISA adds Sophos Web Appliance bug to its Known Exploited Vulnerabilities catalog

Security AffairsNov 22, 09:48 UTC · Nov 22, 2023Exploit / PoC in the wildCVE-2023-36584 CVE-2023-1671 CVE-2023-2551

60

Citrix NetScaler ADC and Gateway Devices Under Attack: CISA Urges Immediate Action

The Hacker NewsSep 7, 03:22 UTC · Sep 7, 2023Exploit / PoC in the wildCVE-2023-3519

60

CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the

The Hacker NewsAug 21, 03:43 UTC · Aug 21, 2023Exploit / PoC in the wildCVE-2023-24489 CVE-2023-3519

60

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net SecurityJul 21, 11:15 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+2 CVEs

60

Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

The Hacker NewsJun 1, 04:02 UTC · Jun 1, 2023Exploit / PoC in the wildCVE-2023-28782

60

Critical flaw in WooCommerce Payments plugin allows site takeover

Security AffairsMar 24, 14:45 UTC · Mar 24, 2023Exploit / PoC in the wild

60

CISA adds 3 new bugs to Known Exploited Vulnerabilities Catalog

Security AffairsMar 8, 11:58 UTC · Mar 8, 2023Exploit / PoC in the wildCVE-2022-35914 CVE-2022-33891 CVE-2022-28810+1 CVEs

60

Surge in Magento 2 template attacks exploiting CVE-2022

Security AffairsSep 23, 13:55 UTC · Sep 23, 2022Exploit / PoC in the wildCVE-2022-24086

60

Zero Day attacks target online stores using PrestaShop

Security AffairsJul 26, 06:23 UTC · Jul 26, 2022Exploit / PoC CVE-2022-36408

60

New ToddyCat APT targets high

Security AffairsJun 21, 15:05 UTC · Jun 21, 2022Exploit / PoC

60

DirtyMoe modules expand the bot using worm

Security AffairsMar 21, 08:03 UTC · Mar 21, 2022Exploit / PoC CVE-2020-0674 CVE-2019-9082 CVE-2019-2725+3 CVEs

60

Critical Magento zero-day flaw CVE-2022

Security AffairsFeb 14, 12:09 UTC · Feb 14, 2022Exploit / PoC in the wildCVE-2022-24086

60

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

The Hacker NewsSep 27, 04:39 UTC · Sep 27, 2021Exploit / PoC CVE-2021-37344 CVE-2021-37346 CVE-2021-37350+8 CVEs1

60

Hackers exploit 3-years old flaw to wipe Western Digital devices

Security AffairsJun 25, 18:07 UTC · Jun 25, 2021Exploit / PoC in the wildCVE-2018-18472

60

Hackers‌ ‌Actively‌ ‌Exploiting‌ ‌0-Day‌ ‌in WordPress Plugin Installed on Over ‌17,000‌ ‌Sites

The Hacker NewsJun 3, 05:51 UTC · Jun 3, 2021Exploit / PoC in the wild

60

Critical Zero-Day in WordPress Plugin Under Active Attack

Infosecurity MagazineJun 2, 11:06 UTC · Jun 2, 2021Exploit / PoC in the wild

60

Researcher discloses exploit code for a vBulletin zero

Security AffairsAug 11, 08:14 UTC · Aug 11, 2020Exploit / PoC CVE-2019-16759

60

Research shows that devices banned by US government lack basic security practices

Help Net SecurityJul 28, 10:13 UTC · Jul 28, 2020Exploit / PoC

60

vBulletin zero-day exploited in the wild in wake of exploit release

Help Net SecurityMay 28, 11:23 UTC · May 28, 2020Exploit / PoC in the wildCVE-2019-16759

60

Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda”

Cisco TalosSep 17, 15:09 UTC · Sep 17, 2019Exploit / PoC CVE-2017-10271 CVE-2017-5638

60

Crooks leverages .htaccess injector on Joomla and WordPress sites for malicious redirects

Security AffairsMay 27, 12:39 UTC · May 27, 2019Exploit / PoC CVE-2018-9206

60

Experts release PoC exploit for flaw in WordPress WooCommerce

Security AffairsApr 27, 11:02 UTC · Apr 27, 2019Exploit / PoC

60

Hackers Actively Exploiting Widely

The Hacker NewsApr 23, 19:23 UTC · Apr 23, 2019Exploit / PoC in the wildCVE-2019-9978

60

New Apache Web Server Bug Threatens Security of Shared Web Hosts

The Hacker NewsApr 3, 09:07 UTC · Apr 3, 2019Exploit / PoC CVE-2019-0211 CVE-2019-0217 CVE-2019-0215

60

A few binary planting 0

Security AffairsMar 18, 13:08 UTC · Mar 18, 2019Exploit / PoC

45

Zerodium Offers to Buy Zero

The Hacker NewsJan 8, 12:00 UTC · Jan 8, 2019Exploit / PoC

60

A critical flaw in WordPress GDPR compliance plugin exploited in the wild

Security AffairsNov 12, 10:08 UTC · Nov 12, 2018Exploit / PoC in the wild

60

CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild

Security AffairsNov 11, 13:58 UTC · Nov 11, 2018Exploit / PoC in the wildCVE-2018-15961

60

Python-based attack tools are the most common vector for launching exploit attempts

Help Net SecurityOct 1, 00:00 UTC · Oct 1, 2018Exploit / PoC1

57