Back
Platform
PHP
Related CVEs
Recent activity
Critical RCE Vulnerabilities in Joomla Extensions CVE-2026-48907 & CVE-2026-48908Two critical vulnerabilities affecting Joomla extensions have been reported: CVE-2026-48907 in the Joomla Content Editor (JCE) and CVE-2026-48908 in the SP Page Builder. Both vulne…Critical Joomla JCE Vulnerability Under Active ExploitationA critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw …Critical WordPress Vulnerability CVE-2026-87902 Exploited Within Hours of DisclosureOn September 22, 2026, WordPress released version 7.1.2 to address a critical vulnerability, CVE-2026-87902, which allows unauthenticated attackers to exploit a path traversal flaw…Advanced PHP Web Shell Exploits F5 BIG-IP SystemsA sophisticated Linux implant targeting F5 BIG-IP Access Policy Management (APM) environments has been identified, exploiting CVE-2025-53521, an unauthenticated remote code executi…Critical XSS and Memory Vulnerabilities in Oracle PHP ReleasesOracle has released important security updates for PHP versions 7.4 and 8.0, addressing multiple vulnerabilities including critical cross-site scripting (XSS) flaws and memory mana…Critical PHP Vulnerabilities Enable DoS Attacks on Web ApplicationsTwo critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing significant risks to web applications. CVE-2026-12184 allows attackers to trigge…Critical Vulnerabilities in Tenable Security Center Prompt Urgent Patch ReleaseTenable has released Security Center Patch SC202607.1 to address multiple vulnerabilities in third-party components, including Apache, OpenSSL, PostgreSQL, PHP, and Redis. The patc…High-Severity Stored XSS Vulnerability in HAX CMS (CVE-2026-48527)CVE-2026-48527 is a stored cross-site scripting (XSS) vulnerability in HAX CMS, affecting versions up to 26.0.0. The vulnerability exists in the `/system/api/saveNode` endpoint, wh…Anonymous Researcher Publishes Zero-Day Exploits for Major Software ProjectsAn anonymous researcher known as Bikini has released exploit code for over a dozen zero-day vulnerabilities affecting 15 popular open-source projects, including the Linux kernel an…