HackingPassion.comPHP
2 posts
WordPress Backdoor Rebuilds Itself Seconds After You Delete It and Takes Its Orders From Ethereum
A WordPress backdoor was deleted and came back within seconds. Deleted again, back again. It lived in at least 8 places, the server’s memory too, and had …
PHP Composer Command Injection CVE-2026-40261
PHP Composer Has Two Flaws That Run Arbitrary Commands on Developer Machines PHP Composer, the package manager that almost every PHP developer uses to build …