Výsledky hledání

Metasploit Wrap Up: Lot of summer shells and fit http profiles

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300). Metasploit also got the glow-up of the summer with the new http malleable profiles, MCP functionality and linux multi fetch payloads …

KEV ✓ · ransomware EPSS 0.97 CVE-2025-49132 CVE-2026-15409 CVE-2026-27760 CVE-2026-29053 CVE-2026-3891 CVE-2026-46300 CVE-2026-48907 CVE-2026-60137 CVE-2026-63030 WordPress Ghost CMS SonicWall Linux US

tg: novinka v produktu tg: přehled

14. 8. 23:27 · Rapid7 · Metasploit Wrap Up: Lot of summer shells and fit http profiles

SPOJENO PŘES CVE Upozorňujeme na řetězec kritických zranitelností „wp2shell“ ve WordPress

Upozorňujeme na dvojici zranitelností ve WordPress Core označovaných jako wp2shell (CVE-2026-63030 a CVE-2026-60137), které mohou při kombinovaném zneužití vést ke vzdálenému spuštění kódu (RCE) bez nutnosti přihlášení.

KEV ✓ EPSS 0.97 CVSS 9.0 CVE-2026-60137 CVE-2026-63030 WordPress CZ US AT FR

tg: zneužíváno tg: rozbor tg: návod tg: přehled tp: malware tp: ransomware

14. 8. 15:30 · NÚKIB · Upozorňujeme na řetězec kritických zranitelností „wp2shell“ ve WordPress 23. 7. 20:00 · Cisco Talos · Don’t swing at everything 23. 7. 02:00 · Elastic Security · wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution 20. 7. 11:01 · CERT.at · Kritische Sicherheitslücken in WordPress - Updates verfügbar 20. 7. 02:00 · CERT-FR – alerty · Multiples vulnérabilités dans WordPress (20 juillet 2026)

WordPress Core Interpretation Conflict Vulnerability (CVE-2026-63030)

CISA added CVE-2026-63030 to the Known Exploited Vulnerabilities catalog. Affected product: WordPress Core. Remediation due date: 2026-07-24.

KEV ✓ EPSS 0.97 CVE-2026-63030 WordPress US

21. 7. 02:00 · CISA KEV · WordPress Core Interpretation Conflict Vulnerability (CVE-2026-63030)

20th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Ernst & Young, a global accounting and professional services company, has disclosed a data breach involving a compromised third-party IT support platform. The exposed support tickets may have contained client documents, tax information, employee details, and other sensitive information submitted while requesting technical assistance. Jscrambler, a…

KEV ✓ · ransomware EPSS 0.97 CVE-2026-15409 CVE-2026-15410 CVE-2026-56155 CVE-2026-56164 CVE-2026-60137 CVE-2026-63030 Microsoft WordPress SonicWall výroba a průmysl finance IL

20. 7. 14:18 · Check Point Research · 20th July – Threat Intelligence Report