PHP2Shell (CVE-2026-109618/109619) maakt RCE zonder inlog mogelijk. Patches komen vandaag; NCSC en andere sites gaan uit ...

PHP heeft een patch uitgebracht om twee kritieke kwetsbaarheden te dichten. De makers adviseren gebruikers om direct een ...

De makers van PHP waarschuwen website- en softwarebeheerders voor twee ernstige kwetsbaarheden in PHP. Het gaat om remote code execution-bugs die eenvoudig kunnen worden uitgebuit. PHP wil zelf later ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix TLS verification bypasses, a Brotli decoder bug and a repeated-random-value issue in ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.

Two vulnerabilities leading to unauthenticated remote code execution, for which even the Japanese Prime Minister called for ...

GitLab has released urgent security updates for a critical vulnerability that could let attackers run code on self-managed ...

Security researchers have uncovered another LiteLLM package hijack, warning that malicious code in version 1.107.0 can steal ...

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to ...

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...

Photo: Libicki et al / Wikimedia Commons (Public domain) A series of critical vulnerabilities in the PHP programming language ...