PHP - CVE CyberSecurity Database News (Page 2)

Sep 19, 2025 RCE Exploit PHP

CVE-2025-48703 - Unauthenticated Remote Code Execution in CWP (Control Web Panel) File Manager – Full Exploit Guide

--- Published: June 2024 Vulnerable Software: CWP (Control Web Panel, formerly CentOS Web Panel) < .9.8.1205 Vulnerability Type: Remote Code Execution (RCE) Attack

Sep 9, 2025 WordPress PHP

CVE-2025-47437 - SSRF in LiteSpeed Cache (All Versions through 7..1) — Exploit & Analysis

A brand new security hole has been found in LiteSpeed Technologies' LiteSpeed Cache plugin (versions up to 7..1). This vulnerability, tracked as CVE-2025-47437,

Sep 4, 2025 Exploit PHP

CVE-2025-26421 - Lock Screen Bypass Vulnerability Explained (With Code Example and Exploit Walkthrough)

A critical vulnerability, CVE-2025-26421, was recently discovered in widely-used Android devices. This flaw allows attackers to bypass the lock screen due to a logic error

Aug 28, 2025 RCE API Exploit SQL PHP

CVE-2025-57819 - Exploiting Unauthenticated Admin Access in FreePBX (Endpoint 15, 16, 17) – Details & Practical Attack Scenarios

FreePBX is a popular open-source VoIP system, widely used for managing voice communications in organizations. It offers a web-based interface for administering PBX functionality. But

Jun 5, 2025 Exploit PHP

CVE-2025-48493 - Sensitive Redis AUTH Credentials Logged in Plain Text by Yii2 Redis Extension

If you build web applications using the PHP Yii2 framework, you might use the Yii2 Redis extension to connect your app to a Redis database.