php
-
Laravel TokenGuard bypass (CVE-2026-114509): how attackers log in as your users, and how to fix it
A critical flaw in Laravel’s built-in token guard lets attackers on MySQL or MariaDB sign in as existing users without their API…
-
PHP2Shell explained: who is affected, what attackers do, and how to patch
Two actively exploited PHP flaws (CVE-2026-109618 and CVE-2026-109619) let attackers run code on web servers without logging in. Here is who is…