Aggregator

A vulnerability has been found in docjojo atec Debug Plugin up to 1.2.22 on WordPress and classified as problematic. This affects an unknown function. The manipulation of the argument custom_log leads to absolute path traversal. This vulnerability is documented as CVE-2025-9516. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as critical, was found in kleor Easy Timer Plugin up to 4.2.1 on WordPress. The impacted element is an unknown function of the component Shortcode Handler. Executing manipulation can lead to code injection. This vulnerability is registered as CVE-2025-9519. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as critical, has been found in docjojo atec Debug Plugin up to 1.2.22 on WordPress. The affected element is an unknown function. Performing manipulation of the argument custom_log results in code injection. This vulnerability is cataloged as CVE-2025-9517. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in docjojo atec Debug Plugin up to 1.2.22 on WordPress. Impacted is an unknown function. Such manipulation of the argument debug_path leads to absolute path traversal. This vulnerability is listed as CVE-2025-9518. The attack may be performed from remote. There is no available exploit.

Cato Networks acquired Aim Security to further enhance the Cato SASE Cloud Platform, supporting secure enterprise adoption of AI agents and both public and private AI applications. Cato has now exceeded $300 million in annual recurring revenue (ARR). The company also added $50 million to its Series G funding round, originally announced in June, through an investment from Acrew Capital. This brings the total funding round to $409 million, at the same terms and valuation. … More →

The post Cato Networks acquires Aim Security to bring AI protection into SASE Cloud appeared first on Help Net Security.

Cybersecurity researchers have uncovered a critical vulnerability in the artificial intelligence supply chain that enables attackers to achieve remote code execution across major cloud platforms including Microsoft Azure AI Foundry, Google Vertex AI, and thousands of open-source projects. The newly discovered attack method, termed “Model Namespace Reuse,” exploits a fundamental flaw in how AI platforms […]

The post New Namespace Reuse Vulnerability Allows Remote Code Execution in Microsoft Azure AI, Google Vertex AI, and Hugging Face appeared first on Cyber Security News.

Cybersecurity researchers have identified a sophisticated evolution in XWorm malware operations, with the backdoor campaign implementing advanced tactics to evade detection systems. The Trellix Advanced Research Center has documented this significant shift in the malware’s deployment strategy, revealing a deliberate move toward more deceptive and intricate infection methods designed to increase success rates while remaining […]

The post XWorm Malware Adopts New Infection Chain to Bypass Security Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CISOs are dealing with an overload of vulnerability data. Each year brings tens of thousands of new CVEs, yet only a small fraction ever become weaponized. Teams often fall back on CVSS scores, which label thousands of flaws as “high” or “critical” but fail to show which ones actually matter. The result is wasted effort, long patch backlogs, and exploitable weaknesses left in production. Traditional approaches have left security leaders with what Jeff Gouge, CISO … More →

The post Cutting through CVE noise with real-world threat signals appeared first on Help Net Security.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'gongjae' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Michael DePlante (@izobashi) of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Hossein Lotfi (@hosselot) of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-09-04, 6 days ago. The vendor is given until 2026-01-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.