Dream Research
dream-research · B · candidate
Added 2026-10-29 (S1/S3): artifact-based research on exposed attacker infrastructure; its 2026-10-27 post on the PHP2Shell plus Fragnesia chain against firewall appliances is cited by the PHP2Shell and Fragnesia entries. No feed found; `extract` reads the blog listing and each post. Candidate: promote to active after 3 contributing runs.
Cited in 3 entries
Citation cadence
Citation days per ISO week (24 weeks of coverage span, total 3).
- CVE-2026-109618 / CVE-2026-109619, PHP (PHP2Shell): two unauthenticated remote-code-execution flaws in the runtime, fixed on 2026-10-21 in 8.5.12, 8.4.27, 8.3.36 and 8.2.35, with attack traffic already observed and no upstream release for 8.1 and older (CVSS 4.0 9.2)2026-10-21
- A near-autonomous, multi-agent AI framework compromised Taiwanese government infrastructure over four days, cracking 85 accounts, exfiltrating 2,564+ personnel records, and bypassing its own safety guardrails by reframing itself as 'authorized penetration testing'2026-08-28
- CVE-2026-46300, Linux kernel: local privilege escalation via xfrm ESP-in-TCP ("Fragnesia"), listed by CISA as exploited and chained with the PHP2Shell flaws to reach root, PoC public2026-05-15