NewsThe Register — Security
PHP2Shell exploit bypasses protections designed to stop remote code execution
Teaser from the source
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on protections
Other advisories
- MediumCVE-2026-77062The boneIO Black web interface lacks proper clickjacking protections. A remote attacker can embed the control panel in an iframe on a malicious web page and …
- HighCVE-2026-114096Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections
- Highghsa:GHSA-8w8g-wq8h-fq33Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections
- HighCVE-2026-87818GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle
- Mediumghsa:GHSA-whh4-5q6c-9v3xGitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle
- Not ratedosv:CVE-2026-100719Froxlor before 2.3.12 Credential Disclosure via DirProtections API
- MediumCVE-2025-24890gix-sec safe.directory protections absent for elevated administrators
- Not ratedosv:CVE-2025-24890gix-sec safe.directory protections absent for elevated administrators
Other news entries
- OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsNewsThe Hacker News
- Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksNewsBleepingComputer
- Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsNewsSecurityWeek
- ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security IncidentNewsThe Hacker News
- Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory BugNewsThe Hacker News
- Fighting GenAI with GenAI: The New Email Security LandscapeNewsThe Register — Security
- 500,000 Active Credentials Left Exposed on GitHubNewsSecurityWeek
- New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy ProtectionsNewsSecurityWeek
ID