X

Vous n'êtes pas connecté

العناوين :

Maroc Maroc - THECYBERTHRONE.IN - A La Une - 06/01/2025 09:17

CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability

CVE-2024-10957 is a high-severity vulnerability affecting the UpdraftPlus: WP Backup & Migration Plugin for WordPress. This vulnerability, present in versions up to and including 1.24.11, enables attackers to perform PHP Object Injection through the deserialization of untrusted input in the recursive_unserialized_replace function. Here’s a comprehensive analysis of this vulnerability, its potential impact, and mitigation strategies. […]

Articles similaires

Sorry! Image not available at this time

Actively exploited critical flaw in Modular DS WordPress plugin enables admin takeover

securityaffairs.co - 16/Jan 08:26

A critical Modular DS WordPress flaw (CVE-2026-23550) is actively exploited, enabling unauthenticated privilege escalation. Threat actors are actively...

Sorry! Image not available at this time

Critical FortiSIEM Vulnerability Lets Attackers Run Arbitrary Commands via TCP Packets

itsecuritynews.info - 14/Jan 13:02

Fortinet disclosed a critical OS command injection vulnerability in FortiSIEM on January 13, 2026, warning users of a high-risk flaw that lets...

Sorry! Image not available at this time

Critical FortiSIEM Vulnerability Lets Attackers Run Arbitrary Commands via TCP Packets

itsecuritynews.info - 14/Jan 13:02

Fortinet disclosed a critical OS command injection vulnerability in FortiSIEM on January 13, 2026, warning users of a high-risk flaw that lets...

Sorry! Image not available at this time

40K WordPress Installs at Risk From Modular DS Admin Bypass

itsecuritynews.info - 15/Jan 22:02

CVE-2026-23550 is being exploited to gain unauthenticated admin access via the Modular DS WordPress plugin. The post 40K WordPress Installs at Risk...

Sorry! Image not available at this time

40K WordPress Installs at Risk From Modular DS Admin Bypass

itsecuritynews.info - 15/Jan 22:02

CVE-2026-23550 is being exploited to gain unauthenticated admin access via the Modular DS WordPress plugin. The post 40K WordPress Installs at Risk...

Sorry! Image not available at this time

Ni8mare flaw gives unauthenticated control of n8n instances

securityaffairs.co - 07/Jan 21:15

A critical n8n flaw (CVE-2026-21858, CVSS 10.0), dubbed Ni8mare, allows unauthenticated attackers to fully take over vulnerable instances. Researchers...

Sorry! Image not available at this time

Hackers exploit Modular DS WordPress plugin flaw for admin access

bleepingcomputer.com - 15/Jan 20:49

Hackers are actively exploiting a maximum severity flaw in the Modular DS WordPress plugin that allows them to bypass authentication remotely and...

Sorry! Image not available at this time

Hackers exploit Modular DS WordPress plugin flaw for admin access

bleepingcomputer.com - 15/Jan 20:49

Hackers are actively exploiting a maximum severity flaw in the Modular DS WordPress plugin that allows them to bypass authentication remotely and...

Sorry! Image not available at this time

CVE-2025-64155: Exploit Code Released for Critical Fortinet FortiSIEM Command Injection Vulnerability

itsecuritynews.info - 14/Jan 22:02

Exploit code has been published for CVE-2025-64155, a critical command injection vulnerability affecting Fortinet FortiSIEM devices. Key takeaways:...

Sorry! Image not available at this time

Max severity Ni8mare flaw lets hackers hijack n8n servers

bleepingcomputer.com - 07/Jan 17:41

A maximum severity vulnerability dubbed "Ni8mare" allows remote, unauthenticated attackers to take control over locally deployed instances of the...

أحدث الإصدارات