X

Vous n'êtes pas connecté

Maroc Maroc - THECYBERTHRONE.IN - A La Une - 06/01/2025 09:17

CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability

CVE-2024-10957 is a high-severity vulnerability affecting the UpdraftPlus: WP Backup & Migration Plugin for WordPress. This vulnerability, present in versions up to and including 1.24.11, enables attackers to perform PHP Object Injection through the deserialization of untrusted input in the recursive_unserialized_replace function. Here’s a comprehensive analysis of this vulnerability, its potential impact, and mitigation strategies. […]

Articles similaires

Sorry! Image not available at this time

Attackers Actively Exploiting Critical Vulnerability in Breeze Cache Plugin

itsecuritynews.info - 05/May 18:07

On April 22nd, 2026, we publicly disclosed a critical Arbitrary File Upload vulnerability in Breeze Cache, a WordPress plugin with an estimated...

Sorry! Image not available at this time

Attackers Actively Exploiting Critical Vulnerability in Breeze Cache Plugin

itsecuritynews.info - 05/May 18:07

On April 22nd, 2026, we publicly disclosed a critical Arbitrary File Upload vulnerability in Breeze Cache, a WordPress plugin with an estimated...

Sorry! Image not available at this time

CVE-2026-23870: Imperva Customers Protected Against Critical React Server Components DoS Vulnerability

itsecuritynews.info - 09/May 20:32

TL;DR: A newly disclosed denial-of-service vulnerability, CVE-2026-23870, impacts React Server Components and dependent frameworks, including Next.js...

Sorry! Image not available at this time

Broadcom releases VMware Fusion security update for root access bug

securityaffairs.co - 15:46

Broadcom patched a high-severity VMware Fusion flaw, CVE-2026-41702, that could let local attackers gain root privileges. Broadcom released a security...

Sorry! Image not available at this time

1,000,000 WordPress Sites Affected by Arbitrary File Read and SQL Injection Vulnerabilities in Avada Builder WordPress Plugin

itsecuritynews.info - 12/May 21:32

On March 21st, 2026, we received a submission for an Arbitrary File Read and an SQL Injection vulnerability in Avada Builder, a WordPress plugin with...

Sorry! Image not available at this time

CVE-2026-34354: Guardicore Local Privilege Escalation Vulnerability

itsecuritynews.info - 08/May 15:32

Read the technical details of a security vulnerability (CVE-2026-34354) in Akamai Guardicore Platform Agent for Windows — and get clear guidance on...

Sorry! Image not available at this time

Argo CD’s ServerSideDiff Vulnerability Enables Kubernetes Secret Extraction

itsecuritynews.info - 06/May 19:11

A critical cybersecurity vulnerability has been uncovered in Argo CD, a widely used declarative GitOps continuous delivery tool for Kubernetes...

Sorry! Image not available at this time

Argo CD’s ServerSideDiff Vulnerability Enables Kubernetes Secret Extraction

itsecuritynews.info - 06/May 19:11

A critical cybersecurity vulnerability has been uncovered in Argo CD, a widely used declarative GitOps continuous delivery tool for Kubernetes...

Sorry! Image not available at this time

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin

bleepingcomputer.com - 21:07

Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to...

Sorry! Image not available at this time

VMware Fusion Flaw Could Allow Attackers to Gain Root Privileges

itsecuritynews.info - 13:03

A newly disclosed vulnerability in VMware Fusion has raised serious security concerns after researchers confirmed it could allow attackers to escalate...