Hunt Lab 2026-W44

Hunt Lab week 44 (2026)

Open detection queries from Cyber-Threat.net Hunt Lab.

This week

Hunt	Write-up	Folder
PHP2Shell + Fragnesia chain	Article	2026-10-28-php2shell-fragnesia-chain
PeopleSoft CVE-2026-35273	Article	2026-10-28-peoplesoft-psigw-psemhub
Ivanti Connect Secure X-DSCGI-PATH	Article	2026-10-28-ivanti-ics-xdscgi
BeyondTrust SAWFLY / BARECLAW	Article	2026-10-28-beyondtrust-sawfly-bareclaw
MLflow scorer invoke (CVE-2026-116692)	— (no dedicated write-up yet)	2026-10-28-mlflow-scorer-invoke
eMudhra trust-store follow-up	— (no dedicated write-up yet)	2026-10-28-emudhra-trust-store
Magento PolyShell webshells	Article	2026-10-27-magento-polyshell-webshell
Magento PolyShell CMS loader domains	Article	2026-10-27-magento-cms-loader-domains
testmetest npm worm	Article	2026-10-27-testmetest-ide-hook-loader
Node2Shell Brotli	Article	2026-10-26-node2shell-brotli

Star the repo · Follow the site · RSS