Unmasking the new persistent attacks on JapanCisco Talos·Mar 6, 11:00 UTC · Mar 6, 2025VulnerabilityCVE-2024-4577160
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60
Mass PolyShell attack wave hits 471 stores in one hourSansec (Magento / e-commerce security)·Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-7565060
New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to CyberattacksThe Hacker News·May 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-30777CVE-2023-30177CVE-2023-31144+1 CVEs60
CVE-2019-6342 flaw allows hackers to compromise Drupal 8.7.4 websitesSecurity Affairs·Jul 18, 09:34 UTC · Jul 18, 2019VulnerabilityCVE-2019-6342CVE-2019-634060
CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flawSecurity Affairs·Apr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-7600CVE-2017-1027160
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix AttacksThe Hacker News·Jun 26, 07:33 UTC · Jun 26, 2026VulnerabilityCVE-2026-2698060
New WordPress Flaw Lets Unauthenticated Remote Attackers Hack SitesThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2019Vulnerability55
Hackers Have Started Exploiting Drupal RCE Exploit Released YesterdayThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2018VulnerabilityCVE-2018-760060
Researchers Detail Severe "Super FabriXss" Vulnerability in Microsoft Azure SFXThe Hacker News·Mar 30, 17:02 UTC · Mar 30, 2023VulnerabilityCVE-2023-23383CVE-2022-3582960
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
CMS Provider Sitecore Patches Exploited Critical Zero DayInfosecurity Magazine·Sep 4, 13:30 UTC · Sep 4, 2025VulnerabilityCVE-2025-5369060
Critical auth bypass issues affect InfiniteWP Client and WP Time Capsule WordPress pluginsSecurity Affairs·Jan 16, 08:14 UTC · Jan 16, 2020Vulnerability55
Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency MinersThe Hacker News·Apr 18, 09:50 UTC · Apr 18, 2018Vulnerability in the wildCVE-2018-7600CVE-2017-1027160
Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major AppsThe Hacker News·Apr 5, 07:20 UTC · Apr 5, 2023Vulnerability in the wildCVE-2023-2338360
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site BackdoorsThe Hacker News·Apr 28, 08:06 UTC · Apr 28, 2025Vulnerability55
SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025Sansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2025-54236260