#maps

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Oct 1, 2026 // 11:41

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt […]

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

Aug 19, 2026 // 08:52

A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for […]

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Jul 14, 2026 // 11:46

Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw […]

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

Jun 1, 2026 // 12:33

Threat actors are attempting to actively exploit a critical security flaw impacting WP Maps Pro, a WordPress plugin that has had over 15,000 sales on […]

WP Maps Pro bug exploited to create admin accounts on WordPress sites

May 31, 2026 // 17:16

Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue administrator accounts without authentication. The vulnerability, […]