Critical RCE Vulnerabilities in React and Next.js(wiz.io)

113 points by gonepivoting 11 months ago | 50 comments

PHP2Shell: AI uncovers critical RCE in PHP(wiz.io)

398 points by danlark1 23 days ago | 184 comments

Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.

PHP2Shell: Exploitation attempts and remediation trends(wiz.io)

178 points by acossta 17 days ago | 58 comments

Wiz Research blog post analyzing observed PHP2Shell exploitation attempts in honeypots, why they failed, and a 67% drop in vulnerable internet-exposed machines since disclosure.

RediShell: Critical remote code execution vulnerability in Redis(wiz.io)

111 points by mihau 1 year ago | 45 comments

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 10 months ago | 27 comments

RCE Vulnerabilities in K8s Ingress Nginx (9.8 CVE for ingress-Nginx)(wiz.io)

6 points by todsacerdoti 1 year ago | 1 comments

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 23 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 11 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 23 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

OpenClaw privilege escalation vulnerability(nvd.nist.gov)

493 points by kykeonaut 7 months ago | 232 comments

NVD entry for CVE-2026-33579, a privilege escalation vulnerability in OpenClaw; the captured screenshot shows a Reddit network-policy block page instead.

PHP2Shell: AI uncovers critical RCE in PHP(wiz.io)

398 points by danlark1 23 days ago | 184 comments

Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.