AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches reconbee.com/ahsaycbs-fla...
@reconbee.bsky.social
@reconbee.bsky.socialAhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches reconbee.com/ahsaycbs-fla...
@hacks.grA Nextcloud add-on flaw was exploited to plant web shells on servers.
Attackers searched for password and crypto-wallet files; that does not mean they were stolen.…
https://en.hacks.gr/keno-asfaleias-sto-nextcloud-epitrepei-tin-klopi-eyaisthiton-dedomenon/
@it4intserver.bsky.socialiT4iNT SERVER Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets VDS VPS Cloud #CyberSecurity #Zimbra #CVE2026 #WebShells #Hacking
@lse-group-corp.bsky.socialOne encoded POST to PSEMHUB bypassed every WAF signature, wrote dual JSP shells, and added scheduled-task persistence in PeopleSoft. Static keyword rules cannot detect layered Base64 and parameter splitting. #WAFBypass #PeopleSoft #WebShells
@intelnightowl.bsky.socialAttackers exploited the Oracle PeopleSoft CVE-2026-35273 vulnerability to deploy web shells, giving attackers persistent, unauthorized access to the system. #Oracle #PeopleSoft #CVE #webshells https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html
@donwebmedia.bsky.socialCómo bloquear PHP en wp-content/uploads (2026)
La segunda opción (141 caracteres) cumple con todos los requisitos.
Bloquear la ejecución de PHP en uploads es clave para evitar webshells en WordPress....
#webshells #htaccess #nginx #wordfence #wpcontent