Search: “webshell”

124 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 124 Exploit / PoC 108 Malware 63 Ransomware 59 Threat actor 46 Data breach 28 Advisory 5 Policy & legal 4 Industry 2 Phishing & fraud 1

SeverityAll critical 288 high 128 medium 20 low 3 info 1

Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of Credentials

Palo Alto Unit 42Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs

60

DeftTorero TTPs in 2019

Kaspersky SecurelistOct 3, 06:11 UTC · Oct 3, 2022Vulnerability

30

Why Patch Management Isn’t Enough: SharePoint, Webshells & the Modern Threat Landscape

Recorded FutureAug 11, 00:00 UTC · Aug 11, 2025Vulnerability CVE-2023-47246

60

BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government

Security AffairsNov 1, 17:41 UTC · Nov 1, 2025Vulnerability CVE-2023-20198

35

(Re)check your patched NetScaler ADC and Gateway appliances for signs of compromise

Help Net SecurityAug 16, 00:00 UTC · Aug 16, 2023Vulnerability CVE-2023-3519

60

Making Friends By Proactive Notification

Cisco TalosMay 17, 16:39 UTC · May 17, 2016Vulnerability

42

JSP webshells being dropped on unpatched PTC Windchill instances

Help Net SecurityJul 27, 12:30 UTC · Jul 27, 2026Vulnerability in the wildCVE-2026-12569 CVE-2026-4681

60

Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)

Help Net SecurityJun 26, 09:26 UTC · Jun 26, 2026Vulnerability in the wildCVE-2026-20230 CVE-2026-20045

60

Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell)

Palo Alto Unit 42Jun 5, 17:51 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-41040 CVE-2022-41082 CVE-2021-34473+2 CVEs

60

Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)

Help Net SecurityAug 20, 08:46 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324

60

China-linked group Fire Ant exploits VMware and F5 flaws since early 2025

Security AffairsJul 28, 08:28 UTC · Jul 28, 2025Vulnerability CVE-2023-34048 CVE-2023-20867 CVE-2022-1388

60

Ongoing exploitation of CVE-2022-41352 (Zimbra 0

Kaspersky SecurelistOct 13, 08:00 UTC · Oct 13, 2022Vulnerability CVE-2022-41352 CVE-2015-1197

47

PolyShell: unrestricted file upload in Magento and Adobe Commerce

Sansec (Magento / e-commerce security)May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild

60

Attackers Conducting Cryptojacking Operation Against U.S. Education Organizations

Palo Alto Unit 42Jun 6, 13:25 UTC · Jun 6, 2024Vulnerability

42

Threat Advisory: Microsoft warns of actively exploited vulnerabilities in Exchange Server

Cisco TalosSep 30, 21:16 UTC · Sep 30, 2022Vulnerability in the wildCVE-2022-41040 CVE-2022-41082

60

Unpatched Microsoft Exchange Zero

Security AffairsSep 30, 07:25 UTC · Sep 30, 2022Vulnerability in the wild

60

Mass PolyShell attack wave hits 471 stores in one hour

Sansec (Magento / e-commerce security)Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-75650

60

Exploit for critical SAP Netweaver flaws released (CVE-2025-31324, CVE-2025-42999)

Help Net SecurityAug 20, 00:00 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324 CVE-2025-42999 CVE-2025-30012+4 CVEs

60

SharePoint vulnerability with 9.8 severity rating under exploit across globe

Ars Technica · SecurityJul 21, 19:30 UTC · Jul 21, 2025Vulnerability in the wildCVE-2025-53770 CVE-2025-53771 CVE-2025-49704+1 CVEs

60

Turning Criminal Forum Exploit Chatter Into Vulnerability Risk Analysis

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability CVE-2016-3081 CVE-2015-2419 CVE-2015-4852+1 CVEs

47

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Unpatched critical Atlassian Confluence Zero

Security AffairsJun 3, 10:13 UTC · Jun 3, 2022Vulnerability in the wildCVE-2022-26134 CVE-2021-26084

60

Suspected Chinese Threat Group Targets Universities

Infosecurity MagazineJul 7, 15:40 UTC · Jul 7, 2026Vulnerability CVE-2024-42009 CVE-2025-49113

47

Unauthenticated remote code execution in JTL Shop

Sansec (Magento / e-commerce security)Jun 18, 19:31 UTC · Jun 18, 2026Vulnerability in the wildCVE-2026-54390

60

Over 200 PrestaShop stores expose installer, allowing full takeover

Sansec (Magento / e-commerce security)Apr 14, 13:40 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-75650

60

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

Help Net SecurityMar 30, 10:17 UTC · Mar 30, 2026Vulnerability in the wildCVE-2025-53521

60

Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience

Help Net SecurityFeb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731 CVE-2024-12356 CVE-2026-1281+2 CVEs

60

Commvault plugs holes in backup suite that allow remote code execution

Help Net SecurityAug 20, 00:00 UTC · Aug 20, 2025Vulnerability CVE-2025-57788 CVE-2025-57789 CVE-2025-57791+2 CVEs

47

What to know about ToolShell, the SharePoint threat under mass exploitation

Ars Technica · SecurityJul 23, 20:14 UTC · Jul 23, 2025Vulnerability in the wildCVE-2025-49706 CVE-2025-49704

60

Chained Vulnerabilities Exploited in Ivanti Cloud Service Appliances

Infosecurity MagazineJan 23, 16:30 UTC · Jan 23, 2025Vulnerability CVE-2024-8963 CVE-2024-9379 CVE-2024-8190+1 CVEs1

60

Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164)

Help Net SecurityDec 18, 09:23 UTC · Dec 18, 2023Vulnerability in the wildCVE-2023-50164

60

CISA, experts warn of Citrix vulnerabilities being exploited by hackers

The RecordAug 16, 21:19 UTC · Aug 16, 2023Vulnerability CVE-2023-24489 CVE-2023-3519

47

Critical Microsoft Azure RCE flaw impacted multiple services

Security AffairsJan 19, 16:02 UTC · Jan 19, 2023Vulnerability

55

CISA orders civilian agencies to patch Zimbra bug after mass exploitation

The RecordJan 11, 00:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2022-37042 CVE-2022-27925 CVE-2022-27924

60

Two Microsoft Exchange zero-days exploited by attackers (CVE-2022-41040, CVE-2022-41082)

Help Net SecurityOct 3, 10:39 UTC · Oct 3, 2022Vulnerability CVE-2022-41040 CVE-2022-41082

60

Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG

Security AffairsMay 10, 06:42 UTC · May 10, 2022Vulnerability CVE-2022-1388

60

Tens of AccessPress WordPress themes compromised as part of a supply chain attack

Security AffairsJan 24, 20:33 UTC · Jan 24, 2022Vulnerability CVE-2021-24867

47

Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)

Help Net SecurityDec 3, 00:00 UTC · Dec 3, 2021Vulnerability in the wildCVE-2021-44077 CVE-2021-336171

60

Operation TunnelSnake

Kaspersky SecurelistMay 6, 10:00 UTC · May 6, 2021Vulnerability

42

Op Wocao - China

Security AffairsDec 23, 15:44 UTC · Dec 23, 2019Vulnerability

30