The Hacker News

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens ...
The Hacker News

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were ...
RS Web Solutions

WP2Shell Vulnerability Allows Hackers to Generate WordPress Admin Accounts and Deploy Web Shells Without Authentication

Discover how the WP2Shell vulnerability lets hackers create WordPress admin accounts and deploy web shells without ...
Security Boulevard

php2shell one week later: Why one exploit doesn’t work everywhere

A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems ...
The Next Web

Cloudflare sees millions of attempts to exploit critical PHP flaws

Cloudflare saw millions of attempts to exploit two critical PHP flaws within hours of their disclosure, CEO Matthew Prince said.