Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Organizations should combine the NVD and CISA KEV catalog to prioritize vulnerabilities effectively, focusing on managing real risks rather than being overwhelmed by theoretical scores and alert fatigue.. To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the NVD provides baseline technical metrics aligned with the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 11 articles for you...
78
phpsecurity toolstatic analysisRIPS Static Analyzer For PHP Web Apps: Security Insights and Tools
RIPS is a tool written in PHP to find vulnerabilities using static source code analysis for PHP web applications. By tokenizing and parsing all source code files RIPS is able to transform PHP source code into a program model and to detect sensitive sinks (potentially vulnerable functions) that can be tainted by user input (influenced by a malicious user) during the program flow. . Besides the structured output of found vulnerabilities RIPS also offers an integrated code audit framework for further manual analysis. The link for this article located at Darknet is no longer available. . Besides the structured output of found vulnerabilities RIPS also offers an integrated code audit fra. written, vulnerabilities, using, static, source, analysis. . LinuxSecurity.com Team
Oct 21, 2014
•
Vendors/Products
79
security advisoryphpmalwareKey Strategies to Fortify WordPress Security Against Exploits
In recent months, the web world was hit with a code exploit that affected many users across various web development platforms, from custom systems to Drupal and WordPress.org. This hack exploited a security vulnerability in the popular TimThumb image resizing PHP script, which allowed the hacker full access to any website running the older version of this script.. An exploit of this nature, of course, didn The link for this article located at memeburn is no longer available. . Boost your WordPress security against exploits like TimThumb by regularly updating your core, themes, plugins, and implementing essential measures to protect your site. WordPress Security, Image Resizing Exploits, Website Malware Prevention, PHP Security Practices. . LinuxSecurity.com Team
Oct 07, 2011
•
Security Projects
78
security advisoryphpbug fixPHP 5.3.8 Security Advisory: Critical Bug Fixes For SSL And Cryptography
As expected, the PHP developers have issued version 5.3.8 of the PHP scripting language to address a serious bug found in the previous release. PHP 5.3.8 fixes a bug introduced by the 5.3.7 security update that caused the crypt() function to fail if an MD5 salt was given as an argument. The function is used to hash a string, typically a password, but instead of returning the hashed string, the function merely returned the salt itself.. The update also corrects a bug that caused mysqlnd SSL connections to hang. The developers note that the PHP 5.2.x series is no longer supported, adding that all users are strongly encouraged to upgrade to this latest stable release. The link for this article located at H Security is no longer available. . The Python 3.9.7 release fixes a critical security flaw and enhances TLS connection stability, improving overall safety.. PHP Update, Cryptographic Issues, SSL Fixes, Software Patches. . LinuxSecurity.com Team
Aug 24, 2011
•
Vendors/Products
83
phpsecurity riskattack techniqueUnderstanding Security Risks of PHP's Weak Random Number Generators
PHP comes with two random number generators named rand() and mt_rand(). The first is just a wrapper around the libc rand() function and the second one is an implementation of the Mersenne Twister pseudo random number generator. Both of these algorithms are seeded by a single 32 bit dword when they are first used in a process or one of the seeding functions srand() or mt_srand() is called. This is a great article by Stefan Esser on attacking php PRNG. He explains the attack in such a way that it's easy to understand. . The link for this article located at suspekt is no longer available. . Analyzing PHP's inadequate random number generators reveals vulnerabilities and risks of exploitation.. PHP Random Numbers, mt_rand Attack, PRNG Security, PHP Security Risks. . LinuxSecurity.com Team
Aug 20, 2008
•
Hacks/Cracks
74
encryptionphpsecurity techniquesExploring Cryptography Techniques For Securing PHP Applications
In an ideal world, words like cryptography and security wouldn't even exist, but the real world is far from perfect, so software developers have to spend a good deal of time building security into applications. Cryptography is just one piece of the security puzzle, along with SSL/TLS, certificates, digital signatures, and so on. This article explains how to use PHP to implement the most common cryptographic algorithms. In addition to describing PHP's default encryption functions, you'll see how to use a wide variety of cryptographic libraries and packages. Building security into your web applications is an important skill to have. Have you thought about adding cryptography to your php programs? If so this article looks at ways of doing so.. The link for this article located at Devx is no longer available. . Explore strategies for implementing cryptographic techniques in PHP applications to enhance security measures and safeguard confidential information.. PHP Security Practices, Cryptographic Libraries, PHP Encryption Techniques. . Bill Locke
May 08, 2008
•
Network Security
77
phpweb applicationapplication securityProtecting PHP Applications from Common Coding Mistakes and Risks
PHP has become the most popular application language on the web, but common security mistakes by developers are giving PHP a bad name. Here's how PHP coding errors have become the new low-hanging fruit for attackers, contributing to the phishing problems on the web. PHP became one of my favorite languages because of how quickly one can write a highly functional, standards-based web application with a database back-end. Unfortunately, attackers are taking these applications down even faster than they appear. . I'm sure I'll receive my share of flames under this column - but this is unfortunate, as I would hate to see such a nice language start to languish - however, for many folks there's no easier way to compromise a web server than to find a vulnerable application written in PHP. Let me start by saying that I'm a big fan of PHP and have written a number of web applications with it over the years. It's a great language that is now object-oriented, powerful and easy to learn, has a simple syntax, integrated SQL connectors, and high performance. It's simple to compile, very cross-platform, and has become arguably the dominant language on the web - thousands of commercial and open-source applications are available and in use. The link for this article located at The Register is no longer available. . I'm sure I'll receive my share of flames under this column - but this is unfortunate, as I would hat. become, popular, application, language, common, security, mistakes. . LinuxSecurity.com Team
Jan 11, 2007
•
Server Security
79
security advisorysoftware updatecode executionPHP 4.3.7 Security Advisory: Remote Code Execution Risk
The open-source PHP Group has released a fix for a pair of security holes that could be exploited to execute arbitrary code on remote PHP servers. The flaws affect PHP versions 4.3.7 and prior and version 5.0.0RC3 and prior. The final version of PHP 5.0, which was released earlier this week, is not affected. . . .. The open-source PHP Group has released a fix for a pair of security holes that could be exploited to execute arbitrary code on remote PHP servers. The flaws affect PHP versions 4.3.7 and prior and version 5.0.0RC3 and prior. The final version of PHP 5.0, which was released earlier this week, is not affected. Fixes have been included in the updated PHP 4.3.8, and the PHP Group is strongly enco The link for this article located at Internet News is no longer available. . The collaborative community of PHP developers has issued a patch addressing vulnerabilities that might be leveraged to run untrusted code.. PHP Security, Remote Code Execution, Security Flaws. . LinuxSecurity.com Team
Jul 19, 2004
•
Security Projects
74
security advisorymoderatedenial of servicePHP 4.2.0 4.2.1 Moderate Denial Of Service Threat 112138
The PHP form-data POST handler is susceptible to a malicious POST request that can trigger an error condition which, depending on your hardware, can crash the machine or provide for remote exploitation. On an Intel x86 machine an attacker has no. . .. The PHP form-data POST handler is susceptible to a malicious POST request that can trigger an error condition which, depending on your hardware, can crash the machine or provide for remote exploitation. On an Intel x86 machine an attacker has no control over memory allocation/recovery and can only cause a denial of service; on a Sparc/Solaris machine an attacker would be able to free chunks of memory and overwrite them arbitrarily to run code. PHP versions 4.2.0 and 4.2.1 are vulnerable. The PHP Group has released both a fixed version and patches, including binaries for Windows, available for download here. If immediate tinkering proves inconvenient, the team recommends a temporary workaround of denying POST requests on any affected servers. The issue was discovered by Stefan Esser of eMatters Security. ® The link for this article located at Security Focus is no longer available. . PHP form handling for POST data can be susceptible to harmful requests, leading to potential system failures and exposure to remote attacks.. PHP Security, Denial of Service, Remote Exploitation, Software Updates. . Anthony Pell
Jul 23, 2002
•
Network Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!