Skip to main content
COSMICBYTEZLABS
NewsSecurityHOWTOsToolsTraining
StudyProjectsNewsletterHire MeAbout
Subscribe

Press Enter to search or Esc to close

News
Security
HOWTOs
Tools
Training
Study
Projects
Newsletter
Hire Me
About
RSS Feed
Reading List
Subscribe

Stay in the Loop

Get the latest security alerts, tutorials, and tech insights delivered to your inbox.

Subscribe NowFree forever. No spam.
COSMICBYTEZLABS

Your trusted source for IT intelligence, cybersecurity insights, and hands-on technical guides.

2815+ Articles
167+ Guides

CONTENT

  • Latest News
  • Security Alerts
  • HOWTOs
  • Checklists
  • Projects
  • Exam Prep

RESOURCES

  • Search
  • Browse Tags
  • Newsletter Archive
  • Reading List
  • RSS Feed

COMPANY

  • About Us
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 CosmicBytez Labs. All rights reserved.

System Status: Operational
All tags
8 articles

#Web Shell

All CosmicBytez Labs articles tagged #Web Shell, across news, security advisories, how-to guides, and projects.

  • NewsSep 8, 2026

    "Poisoned Refresh" Rootkit Injects Fileless PHP Web Shells on Breached F5 BIG-IP Devices

    Sophos found a stealthy Linux rootkit hooking PHP on F5 BIG-IP APM servers to inject memory-only web shells, leaving disk files untouched.

  • SecurityAug 27, 2026

    CVE-2026-80235: EFence Unauthenticated Arbitrary File Upload to RCE

    EFence by Thinking Software Technology allows unauthenticated remote attackers to upload web shells and achieve full code execution.

  • SecurityAug 26, 2026

    CVE-2026-16286: Unauthenticated Web Shell Upload in TRtek Software Repository Management

    Unrestricted file upload flaw lets attackers plant a web shell on TRtek's Software Repository Management with no authentication required.

  • SecurityJun 12, 2026

    CVE-2026-11839: Unrestricted File Upload Enables Web Shell Deployment in Rotaban

    A critical unrestricted file upload vulnerability in the Rotaban platform by Basarsoft Information Technologies allows authenticated attackers to upload...

  • NewsMay 26, 2026

    Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell

    A hardcoded machineKey value in KnowledgeDeliver's configuration enabled ViewState deserialization attacks leading to remote code execution and web shell.

  • NewsMay 26, 2026

    KnowledgeDeliver Flaw Exploited as Zero-Day to Install Web

    Attackers exploited a critical zero-day vulnerability in KnowledgeDeliver LMS servers to deploy the Godzilla web shell, giving persistent backdoor access to.

  • NewsMay 26, 2026

    KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

    A now-patched high-severity zero-day vulnerability in Digital Knowledge's KnowledgeDeliver LMS, a popular learning management system in Japan, was actively.

  • SecurityApr 24, 2026

    CVE-2026-6885: Borg SPM 2007 Arbitrary File Upload Enables

    A critical arbitrary file upload vulnerability in the end-of-life Borg SPM 2007 application allows unauthenticated attackers to upload web shell backdoors...