With access to any CMS functionality, an attacker with administrator permissions could use blocks to exfiltrate information stored in cache. This sensitive information included store configuration, encryption key, and database connection details. Additionally, it was possible to execute code. Part of patch SUPEE-8788 This vulnerability affects the... Weiterlesen: [APPSEC-1247] Block cache exploit
Intelligence View
⚡ tsecurity.de Intelligence
[APPSEC-1247] Block cache exploit
With access to any CMS functionality, an attacker with administrator permissions could use blocks to exfiltrate information stored in cache. This sensitive…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
CVE-2026-70183 | Microsoft ASP.NET Core/Visual Studio race condition (Nessus ID 370204)
11 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-70186 | Microsoft ASP.NET Core/Visual Studio deadlock (Nessus ID 370204) VVulDB Updatesvor 1 Std.CVE-2026-88092 | Microsoft ASP.NET Core Kestrel request smuggling (Nessus ID 370204) VVulDB Updatesvor 1 Std.CVE-2026-70188 | Microsoft ASP.NET Core/Visual Studio response splitting (Nessus ID 370204) VVulDB Updatesvor 1 Std.CVE-2026-70196 | Microsoft ASP.NET Core/Visual Studio resource consumption (Nessus ID 370204) VVulDB Updatesvor 3 Std.CVE-2026-102870 | Microsoft ASP.NET Core/Visual Studio code injection (Nessus ID 370204) VVulDB Updatesvor 3 Std.CVE-2026-58280 | Microsoft .NET/.NET Framework/Visual Studio recursion (Nessus ID 370204)
+5
11 Quellen
CVE-2026-111847 | Kings Plugins MarketKing Plugin up to 2.1.72 on WordPress authorization (EUVD-2026-108030)
10 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-112826 | eLightUp Falcon Plugin up to 2.12.0 on WordPress authorization (EUVD-2026-108032) VVulDB Updatesvor 1 Std.CVE-2026-112843 | WP Chill Strong Testimonials Plugin up to 3.3.14 on WordPress access control (EUVD-2026-108033) VVulDB Updatesvor 1 Std.CVE-2026-114180 | Wpmet Metform Plugin up to 4.3.2 on WordPress access control (EUVD-2026-108031) VVulDB Updatesvor 1 Std.CVE-2026-114175 | DigitalME eRoom Plugin up to 1.7.1 on WordPress authorization (EUVD-2026-108028) VVulDB Updatesvor 1 Std.CVE-2026-112867 | H5P Plugin up to 1.17.9 on WordPress cross site scripting (EUVD-2026-108027) VVulDB Updatesvor 1 Std.CVE-2026-114184 | WPVibes Elementor Addon Elements Plugin up to 1.14.4 on WordPress cross site scripting (EUVD-2026-108026)
+4
7 Quellen
CVE-2026-103634 | Apache DataSketches datasketches-cpp out-of-bounds (EUVD-2026-108025)
6 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-114460 | pbuchbinder mod_qos 11.74/11.76/11.79 off-by-one (EUVD-2026-108024) VVulDB Updatesvor 1 Std.CVE-2026-114458 | pbuchbinder mod_qos 11.74/11.76/11.79 array index (EUVD-2026-108022) VVulDB Updatesvor 1 Std.CVE-2026-114457 | pbuchbinder mod_qos 11.74/11.76/11.79 JSON Body Filtering out-of-bounds (EUVD-2026-108021) VVulDB Updatesvor 1 Std.CVE-2026-114459 | Apache mod_qos out-of-bounds (EUVD-2026-108023) VVulDB Updatesvor 45 Min.CVE-2026-17545 | PHP up to 8.2.33/8.3.34/8.4.25/8.5.10 Filesystem CreateFileW input validation (EUVD-2026-87329 / WID-SEC-2026-3585) VVulDB Updatesvor 2 Std.CVE-2025-1218 | PHP up to 8.2.33/8.3.34/8.4.25/8.5.10 mysqlnd wire protocol parser out-of-bounds (Nessus ID 350695 / WID-SEC-2026-3585)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4277804/sicherheitsluecken-cve/appsec-1247-block-cache-exploit/