PHP rce CVE-2026-109618https://www.reddit.com/r/netsec/comments/1xb5g1c/php_rce_cve2026109618
submitted by /u/Wploplin [link] [comments]
🔍 Search
France had more Internet-exposed Danfoss refrigeration dashboards than the rest of the world combined before the supermarket attacks (weekly IPv4 scan data)https://www.reddit.com/r/netsec/comments/1xb45ee/france_had_more_internetexposed_danfoss
I work at IPinfo, which runs a weekly scan of the IPv4 Internet. Short version of what we found: October 6–7 scan, five days before the attack: 2,528 addresses serving a Danfoss StoreView dashboard in 73 countries and territories. France had 1,331 (53%). 85% of the French ones ran software with known flaws, including 527 end-of-life AK-SM 800 units. Only 195 had every fix. Elsewhere it was 84%, so France had more of them online, not worse patching. 1,019 of the French addresses were already open on March 30. October 14 scan: 316 still online in France (−76%, against a normal 3–7% weekly…
CVE-2026-46633: Proving exploitability of Twig sandbox bypasshttps://www.reddit.com/r/netsec/comments/1xb2qvz/cve202646633_proving_exploitability_of_twig
I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules. submitted by /u/vladko312 [link] [comments]
Warning claims two 10.0 RCEs affect PHP 5 and laterhttps://www.reddit.com/r/netsec/comments/1xb1etm/warning_claims_two_100_rces_affect_php_5_and_later
submitted by /u/ryanmerket [link] [comments]
The OffiDocs Browser Extension Campaignhttps://www.reddit.com/r/netsec/comments/1xaw75e/the_offidocs_browser_extension_campaign
submitted by /u/acorn222 [link] [comments]