by @funnysonny.bsky.social
A Feed showing posts regarding CVE's posted within the last 3 days!
The CyberSec Guru Ransomware Actors Weaponize Palo Alto GlobalProtect Authentication Bypass for Stealthy VPN Access Palo Alto GlobalProtect CVE-2026-0257 is being exploited by Qilin and Settra ransomware actors. Check affected PAN-OS… https://thecybersecguru.com/news/cve-2026-0257-globalprotect-vpn-ransomware/
The Daily Tech Feed Attackers bypass GlobalProtect VPN using CVE-2026-0257—patch fast. #CVE2026-0257 #GlobalProtect #VPN #CyberSecurity #PaloAlto #Ransomware https://thedailytechfeed.com/ransomware-gangs-exploiting-palo-alto-globalprotect-bypass-to-infiltrate-vpn-access/
Melekmedia [ICYMI] Satu celah keamanan bisa membuka pintu lebar-lebar bagi malware canggih, seperti pada kasus CVE-2025-48595. Penyerang bisa menarget jurnalis dan aktivis. https://melekmedia.org/artikel/malware-ini-diam-diam-bisa-ambil-alih-android/
The Standup CVE-2026-107845 lets unauthenticated Contao Comments Bundle visitors inject JavaScript into the back end. Opening the Comments module executes it in the user's session; the back end sends no CSP.
SPatterson New on CapturedTech: OpenSSL 4.0.3 DTLS Heap Memory Leak — the CVE-2026-84782 fix, explained. What broke, how the patch fixes it, and how to update safely. capturedtech.com/Home/Post/8898 #OpenSSL #Cybersecurity #DTLS
TheHackerWire 🟠 CVE-2026-78530 - High (7.7) Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-78530/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-78529 - Critical (9.8) Unauthenticated PHP Object Injection in Alliance <= 3.11 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-78529/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-66569 - Critical (9.8) Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-66569/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-66568 - Critical (9.8) Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-66568/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-66567 - Critical (9.8) Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-66567/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🟠 CVE-2026-66566 - High (8.1) Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-66566/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-81797 - Critical (9.8) Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= ... https://www.thehackerwire.com/vulnerability/CVE-2026-81797/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-78535 - Critical (9.8) Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-78535/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-78533 - Critical (9.8) Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. https://www.thehackerwire.com/vulnerability/CVE-2026-78533/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-104801 - Critical (9.1) The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to... https://www.thehackerwire.com/vulnerability/CVE-2026-104801/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🟠 CVE-2026-94538 - High (8.1) The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions u... https://www.thehackerwire.com/vulnerability/CVE-2026-94538/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🟠 CVE-2026-93746 - High (7.5) The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin fo... https://www.thehackerwire.com/vulnerability/CVE-2026-93746/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
TheHackerWire 🔴 CVE-2026-62046 - Critical (9.8) Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Obje... https://www.thehackerwire.com/vulnerability/CVE-2026-62046/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack