Advertisement
PHP 'php2shell' RCE Threatens Web Applications – Patch Now
Two unauthenticated RCE flaws, dubbed 'php2shell', affect PHP versions since 5.4. This poses significant risk to popular web applications like WordPress and Drupal.
PHP RCE Flaws CVE-2026-109618/109619 Actively Exploited
Critical remote code execution flaws in PHP (CVE-2026-109618, CVE-2026-109619) are under active, widespread exploitation, impacting millions of web properties.
GitHub Actions Runners Weaponized to Attack cPanel and WHM Servers
Attackers are leveraging GitHub Actions runners and compromised Packagist packages to launch distributed attacks against cPanel and WHM server instances.
PHP RCE via CVE-2024-4577 — Windows Argument Injection Analysis
Technical analysis of the CVE-2024-4577 vulnerability affecting PHP on Windows. Learn how argument injection leads to RCE and how to secure PHP-CGI environments.
Laravel-Lang PHP Packages Compromised: Credential Stealer Alert
Multiple Laravel-Lang PHP packages have been compromised to deliver a cross-platform credential stealer. Learn how to detect and mitigate this supply chain threat.
Drupal Core Security Update May 2026: Critical Patch Advisory
Drupal warns of an urgent core security update on May 20, 2026. Security teams must prepare for immediate patching to prevent exploit development.
Advertisement
PHP 8.1 End-of-Life: Security Risks and Upgrade Path Analysis
PHP 8.1 has reached its end-of-life status. Learn about the security implications of running unsupported software and the technical steps for remediation.
Malicious Laravel Packagist Packages Deploy Cross-Platform RAT
Security researchers discover malicious Laravel packages on Packagist delivering cross-platform RATs to Windows, macOS, and Linux systems. Audit your PHP dependencies.