HackingPassion.comPHP
3 posts
PHP2Shell Flaw Leaves Millions of Websites Open to Takeover
More than 22 million PHP installations sat exposed online this week, facing two flaws that need no password. The details leaked before a patch existed. Updating …
WordPress Backdoor Rebuilds Itself Seconds After You Delete It and Takes Its Orders From Ethereum
A WordPress backdoor was deleted and came back within seconds. Deleted again, back again. It lived in at least 8 places, the server’s memory too, and had …
PHP Composer Command Injection CVE-2026-40261
PHP Composer Has Two Flaws That Run Arbitrary Commands on Developer Machines PHP Composer, the package manager that almost every PHP developer uses to build …