Latest news
Vulnerability
CVE-2025-14177: Malicious JPEG Files Expose PHP Heap Memory — Critical Flaws in getimagesize() and iptcembed() Patched
18 May 2026 dark6
Two critical memory-safety vulnerabilities in PHP image-processing functions allow attackers to leak sensitive heap memory (CVE-2025-14177) or trigger heap buffer...
Vulnerability
Critical Roundcube vulnerability (CVE-2025-49113): exploit sold in Darknet as “Email Armageddon” looms
6 June 2025 securebulletin.com
A decade-old Remote Code Execution (RCE) flaw in Roundcube, the widely used open-source email client, has escalated into a global...
Spyware
Glutton: a new PHP backdoor
2 January 2025 securebulletin.com
On April 29, 2024, XLab’s threat analysis system detected unusual activities linked to a new malware named Glutton, designed to...