Honeypots Recorded Probes Against Oracle E-Business Suite CVE-2026-101767 Seven Days After Its Patch, and the Finder’s Write-Up Is Dated Patch Day
Defused says its Oracle E-Business Suite decoys recorded...
Browse Tag
Remote Code Execution
24 Articles
A Brotli Flaw Found by OpenAI Codex Security Forced Patches in Node.js, .NET and Python, and Vendors Rate It From Medium to Critical
The fix reached Brotli’s source on February 27, 236 days before...
Eye Security Says It Used Popcorn Time’s Abandoned Updater to Disable It on Over a Million Systems, and Three of the 20 Domains It Lists Are Still Outside the Sinkhole
Eye Security says it registered the lapsed domains behind...
PHP Ships the PHP2Shell Fixes a Day Early After a Leak, and Attackers Were Probing Before the Patch Landed
PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, a...
PHP Warns of Two Critical Flaws and Sets a 14:00 UTC Patch, but the Leak, the Score and the Exploitation Reports Do Not Agree
PHP’s security team says a release fixing two critical flaws,...
Drupal Patches a Critical Code-Execution Flaw That Core Alone Cannot Reach, and Unsupported Branches Get No Fix
Drupal’s October 14 releases fix a critical code-execution flaw...
Wordfence’s AI Finds a Ghostscript Flaw Rated 9.8 in the CVE and Moderate by Red Hat
Wordfence disclosed a Ghostscript heap overflow that Artifex...
Ahsay Says Version 10.3.4 Fixes Two Exploited AhsayCBS Flaws, and Huntress Says It Does Not
Huntress says it first saw attacks on two AhsayCBS backup-server...
GitLab Patches a Second Critical Template Flaw in Its Self-Hosted AI Gateway Within Eight Months
GitLab says an authenticated user with Duo Agent Platform access...
Attackers Were Probing a Zimbra Mail Server Flaw Eight Days After Its Patch, Microsoft Says
Microsoft says it saw attackers probing Zimbra mail servers...