Curated security research, vulnerabilities, advisories and tools for practitioners.

#webshell

Security coverage tagged webshell.

1.

Exploitation in the Wild of wp2shell

blog | 2026-07-20 18:00 | wiz.io | original ↗ | #rce | #wordpress | #vulnerability

2.

CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension

vulnerability | Critical | Actively exploited | 2026-06-12 13:16 | CVE-2026-48907 | yeswehack.com | original ↗ | #active-exploitation | #rce | #public-poc

3.

CVE-2026-45454 — Microsoft SharePoint Server Upload Page Folder Path Traversal to Remote Code Execution

research | 2026-06-10 00:00 | CVE-2026-45454 | aretiq.ai | original ↗ | #rce | #path-traversal | #sharepoint

4.

Iranian-Nexus Operation Against Oman's Government: 12 Ministries Hit and 26,000 Citizen Records Exposed

blog | 2026-05-05 00:00 | hunt.io | original ↗ | #threat-intelligence | #data-exposure | #espionage

5.

KeyPlug Server Exposes Fortinet Exploits & Webshell Activity Targeting a Major Japanese Company

blog | 2025-04-17 00:00 | hunt.io | original ↗ | #exploitation | #apt41 | #fortinet

6.

JSPSpy and ‘Filebroser’: A Custom File Management Tool in Webshell Infrastructure

blog | 2025-03-11 00:00 | hunt.io | original ↗ | #infrastructure | #webshell | #persistence

7.

Introducing pattern-based agentless malware detection using YARA rules

blog | 2024-07-31 14:13 | wiz.io | original ↗ | #cloud-security | #threat-detection | #malware-detection

8.

ProxyLogon (CVE-2021-26855): 2021’s Top Contender for Vulnerability for the Year (It’s March...)

vulnerability | 2021-03-10 00:00 | CVE-2021-26855 | bishopfox.com | original ↗ | #zero-day | #ssrf | #proxylogon