Back
Platform
PHP
Related CVEs
Recent activity
Critical RCE Vulnerabilities in Joomla Extensions CVE-2026-48907 & CVE-2026-48908Two critical vulnerabilities affecting Joomla extensions have been reported: CVE-2026-48907 in the Joomla Content Editor (JCE) and CVE-2026-48908 in the SP Page Builder. Both vulne…Critical Joomla JCE Vulnerability Under Active ExploitationA critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw …Advanced PHP Web Shell Exploits F5 BIG-IP SystemsA sophisticated Linux implant targeting F5 BIG-IP Access Policy Management (APM) environments has been identified, exploiting CVE-2025-53521, an unauthenticated remote code executi…SQL Injection Vulnerabilities Discovered in Gate Pass Management System and Yot CMSTwo critical SQL injection vulnerabilities have been identified in Gate Pass Management System 2.1 and Yot CMS 3.3.1, both published on 2026-05-30. CVE-2018-25424 allows unauthenti…Critical Vulnerabilities in Tenable Security Center Prompt Urgent Patch ReleaseTenable has released Security Center Patch SC202607.1 to address multiple vulnerabilities in third-party components, including Apache, OpenSSL, PostgreSQL, PHP, and Redis. The patc…High-Severity Stored XSS Vulnerability in HAX CMS (CVE-2026-48527)CVE-2026-48527 is a stored cross-site scripting (XSS) vulnerability in HAX CMS, affecting versions up to 26.0.0. The vulnerability exists in the `/system/api/saveNode` endpoint, wh…Critical XSS and Memory Vulnerabilities in Oracle PHP ReleasesOracle has released important security updates for PHP versions 7.4 and 8.0, addressing multiple vulnerabilities including critical cross-site scripting (XSS) flaws and memory mana…Critical PHP Vulnerabilities Enable DoS Attacks on Web ApplicationsTwo critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing significant risks to web applications. CVE-2026-12184 allows attackers to trigge…Anonymous Researcher Publishes Zero-Day Exploits for Major Software ProjectsAn anonymous researcher known as Bikini has released exploit code for over a dozen zero-day vulnerabilities affecting 15 popular open-source projects, including the Linux kernel an…