#shells


Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Sep 30, 2026 // 19:50

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from […]

Hackers exploit Citrix NetScaler zero-day to deploy web shells

Sep 29, 2026 // 21:57

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread […]

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Sep 26, 2026 // 14:47

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The […]

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Sep 16, 2026 // 11:41

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. “This […]

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Sep 3, 2026 // 00:17

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. According to […]

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Sep 2, 2026 // 11:35

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in […]

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Aug 6, 2026 // 11:28

Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from […]

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Aug 6, 2026 // 11:28

Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from […]

KnowledgeDeliver flaw exploited as a zero-day to install web shells

May 27, 2026 // 00:38

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. The flaw is […]