mbenboulo·1d agoGaining RCE on a server running a vulnerable web application (ZipSlip vulnerability)This application was a simple web application. After visiting the page you first see this nice homepage.
CyberSec Sentinel·Oct 26PHP2Shell: Two Vulnerabilities, One Serious Risk🚀An overview of the reported flaws, their potential impact, and why PHP security updates matter.
Chris Christian·Oct 25PHP2Shell: Simplest ExplanationHow a PHP bug can give an attacker control of your serverA response icon1A response icon1
Cyril Shaji·Oct 24Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26Remote Code Execution (RCE) vulnerabilities in core programming language runtimes are rare gems. When CVE-2026-109618 dropped, it…
Arzitha·Oct 24PHP2Shell: What Happens When Attackers Know Before Defenders Do?Part 1 of 2 | Understanding the threat before the warningA response icon1A response icon1
Raviteja Mureboina·Oct 24PHP2Shell: Critical PHP Vulnerabilities Expose Websites to Remote Code ExecutionSecurity researchers have uncovered critical vulnerabilities in PHP, a widely used programming language powering platforms such as…
Thinuri Wickramarachchi·Oct 23PHP2Shell | How an AI Uncovered a 10-Year-Old Flaw Threatening 70% of the WebCVE-2026–109618 & CVE-2026–109619: how memory limits, longjmp(), and stale states allowed unauthenticated Remote Code Execution.
Abhijeet Mahendrakar·Oct 22PHP2Shell: The Critical PHP Vulnerabilities That Turned Ordinary Web Requests Into a Server-Side…How two memory-safety flaws exposed PHP-powered applications to unauthenticated remote code execution — and why defenders had only hours to…
