Wordfence Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۱۰

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026)

Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to ...Read More The post Wordfence Intelligence Week…

آسیب‌پذیری و روز صفر پایگاه داده

خواندن متن کامل در Wordfence Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Unit 42 (Palo Alto) پنجشنبه ۷ آبان ۱۴۰۵ · ۲۱:۳۰

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42.

آسیب‌پذیری و روز صفر

منبع

AWS Security Bulletins پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۱۵

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic. In affected versions, under certain conditions, an authenticated user whose approval policy only authorizes a namespace-scoped issuer could obtain certificates, including subordinate CA certificates, signed by a cluster-scoped issuer they ar…

آسیب‌پذیری و روز صفر امنیت ابری رایانش ابری

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۵۵

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls with a newly disclosed vulnerability. VMware ESX zero-day helped Chinese spies cover their tracks Chinese APT group Warp Panda has leverage…

آسیب‌پذیری و روز صفر هوش تهدید سیستم‌عامل

منبع

Security Affairs پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۳۵

U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Linux Kernel and Broadcom VMWare ESX vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: In July, Broadcom released patches to addre…

آسیب‌پذیری و روز صفر سیستم‌عامل

منبع