ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
ShinyHunters defaced Clop's leak site via unpatched Grav CMS path traversal CVE-2026-42608; Grav patched the 1.7 branch.
12
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #grav-cms
ShinyHunters hacks rival extortion gang and takes over its dark web site
ShinyHunters claims it hacked rival extortion gang Clop's leak site via a Grav CMS flaw and seized its onion domain.
1
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Extortion group ShinyHunters hacked the Clop ransomware gang's leak site, defacing it and stealing server data and onion service private keys.
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
ShinyHunters exploited a Grav CMS file upload flaw to breach and deface the Clop ransomware gang's leak site, claiming theft of source code, logs, and Tor private keys.
3
[webapps] Grav CMS 2.0.7 - RCE
A proof-of-concept exploit for remote code execution in Grav CMS 2.0.7 has been published on Exploit-DB.