CitrixBleed 2 Is Now Ransomware Infrastructure: CVE-2025-5777 Fueling DragonForce Attacks
CVE-2025-5777 (CitrixBleed 2, CVSS 9.3) lets attackers dump live session tokens from unpatched Citrix NetScaler appliances without logging in — bypassing MFA…
CATEGORY
CYBERSECURITY
Security research, penetration testing, CVE analysis, PCI-DSS compliance, and defensive programming techniques for web applications.
69 ARTICLES
WP-SHELLSTORM: Exposed Hacker Server Reveals Mass WordPress Backdoor Operation Targeting 1.4M Sites
An exposed hacker C2 server revealed WP-SHELLSTORM, a webshell access-brokerage crew that used 27 known, already-patched CVEs to backdoor WordPress, Joomla and…
Roundcube Zero-Click Stored XSS: CVE-2026-54432 and CVE-2026-54433 Fire Just From Viewing an Email
Two zero-click stored XSS flaws in Roundcube Webmail (CVE-2026-54432 / CVE-2026-54433) execute JavaScript just from viewing an email - one via an unescaped…
Ubiquiti Ships 25 UniFi Fixes Including an Unauthenticated CVSS 10.0 Command Injection (CVE-2026-50746, Bulletin 066)
Ubiquiti Security Advisory Bulletin 066 patches 25 UniFi vulnerabilities, seven of them critical. The headline flaw, CVE-2026-50746 (CVSS 10.0) in UniFi…
Critical Pre-Auth Authentication Bypass in BeyondTrust Remote Support and PRA (CVE-2026-40138 / CVE-2026-40139)
BeyondTrust's Remote Support and PRA appliances have two pre-auth CVSS 9.2 auth-bypass flaws (CVE-2026-40138/40139). A network attacker can reach elevated…
GhostLock (CVE-2026-43499): 15-Year-Old Linux Kernel rtmutex Flaw Gives Any Local User Root and Container Escape
GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel rtmutex use-after-free. Any local user gets root and can escape containers to the host. A 97%-reliable…
Two Joomla Page Builders Under Active Attack: Page Builder CK (CVE-2026-56290) and SP Page Builder (CVE-2026-48908) Added to CISA KEV
CISA added two CVSS 10.0 Joomla page-builder flaws (CVE-2026-56290, CVE-2026-48908) to its KEV catalog. Both allow unauthenticated file upload to RCE and are…
WPFunnels (CVE-2026-14345): Unauthenticated RCE in a WooCommerce Funnel Builder via Poisoned Log File
WPFunnels (CVE-2026-14345, CVSS 9.8) has an unauthenticated log-poisoning-to-RCE flaw in versions up to 3.12.7. An attacker writes PHP into a log file that…
Januscape: 16-Year-Old KVM Flaw (CVE-2026-53359) Lets a Guest VM Escape to the Host
A 16-year-old use-after-free in Linux KVM's shadow MMU lets a guest VM escape to the host on Intel and AMD. The public PoC panics the host; a withheld exploit…
ModSecurity WAF Bypass: CVE-2026-52747 and CVE-2026-52761 Let Attackers Slip Past Your Rules
Two newly disclosed ModSecurity flaws let attackers slip malicious requests past your WAF. CVE-2026-52747 (High) is a multipart parser differential that strips…
PHP CVE-2026-12184: A Failed TLS Handshake Can Crash Your Entire PHP-FPM Pool
CVE-2026-12184 lets a remote server crash a PHP process - and under PHP-FPM the whole worker pool - just by presenting a broken TLS certificate. No auth and no…
Public PoC Drops for the Microsoft Exchange SSRF Arbitrary-File-Read Flaw (CVE-2026-45504)
CVE-2026-45504 is a server-side request forgery (SSRF) flaw in on-premises Microsoft Exchange that lets an authenticated, low-privileged user read arbitrary…