Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pwn everything Bounce everywhere all at once (part 1)

blog.quarkslab.com | research | #rce | #php | #red-team | #vulnerability | #phpmyadmin | #watering-hole

Summary

Part one of Quarkslab's watering-hole series: a new unauthenticated RCE found in phpMyAdmin 2.11.5 during an assumed-breach audit, showing why old code still deserves deep review.
Published
Collected

original ↗

Related coverage

  1. dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC (github.com)
  2. Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days (blog.quarkslab.com)
  3. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  4. CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoC (github.com)
  5. LLM SecRange: Open-Source Penetration Testing Playground for Large Language Models & Vulnerable Agents (github.com)
  6. Critical RCE vulnerability in PHP CGI: everything you need to know (wiz.io)

back