With access to any CMS functionality, an attacker with administrator permissions could use blocks to exfiltrate information stored in cache. This sensitive information included store configuration, encryption key, and database connection details. Additionally, it was possible to execute code. Part of patch SUPEE-8788 This vulnerability affects the... Weiterlesen: [APPSEC-1247] Block cache exploit
Intelligence View
⚡ tsecurity.de Intelligence
[APPSEC-1247] Block cache exploit
With access to any CMS functionality, an attacker with administrator permissions could use blocks to exfiltrate information stored in cache. This sensitive…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
12 sources
CVE-2024-26696 | Linux Kernel up to 6.7.5 nilfs2 nilfs_lookup_dirty_data_buffers deadlock (Nessus ID 239742 / WID-SEC-2024-0773)
11 more sources
VVulDB Updates1 hour agoCVE-2024-26698 | Linux Kernel up to 6.7.5 hv_netvsc netvsc_probe race condition (Nessus ID 207689 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26700 | Linux Kernel up to 6.1.81/6.6.17/6.7.5 DRM null pointer dereference (Nessus ID 210815 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26702 | Linux Kernel up to 6.7.5 magnetometer rm3100_common_probe out-of-bounds (Nessus ID 249881 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26703 | Linux Kernel up to 6.6.17/6.7.5 timerlat null pointer dereference (5f703935fdb5/2354d29986eb/1389358bb008 / Nessus ID 239841) VVulDB Updates1 hour agoCVE-2024-26705 | Linux Kernel up to 6.6.17/6.7.5 parisc btlb_info denial of service (54944f45470a/aa52be552766/913b9d443a01 / Nessus ID 247350) VVulDB Updates1 hour agoCVE-2024-26707 | Linux Kernel up to 6.7.5 hsr net/hsr/hsr_device.c send_hsr_supervision_frame allocation of resources (Nessus ID 210815 / WID-SEC-2024-0773)
+5
8 sources
CVE-2026-91733 | Google Chrome up to 153.0.8010.36 Skia state issue (Nessus ID 367256)
7 more sources
VVulDB Updates21 min. agoCVE-2026-91747 | Google Chrome up to 153.0.8010.36 Skia use after free (Nessus ID 367256) VVulDB Updates3 hours agoCVE-2026-87512 | Google Chrome up to 152.0.7977.82 ANGLE use after free (EUVD-2026-74486 / Nessus ID 367215) VVulDB Updates3 hours agoCVE-2026-87648 | Google Chrome up to 152.0.7977.82 ANGLE use after free (Nessus ID 367215) VVulDB Updates3 hours agoCVE-2026-87586 | Google Chrome up to 152.0.7977.82 ANGLE out-of-bounds (Nessus ID 367215) VVulDB Updates3 hours agoCVE-2026-87604 | Google Chrome up to 152.0.7977.82 ANGLE out-of-bounds (Nessus ID 367215) VVulDB Updates3 hours agoCVE-2026-91720 | Google Chrome up to 153.0.8010.36 ANGLE uninitialized pointer (Nessus ID 367215)
+1
5 sources
CVE-2026-92248 | Red Hat GIMP file-psd plugin integer overflow (Nessus ID 348350 / WID-SEC-2026-3406)
4 more sources
VVulDB Updates32 min. agoCVE-2026-90948 | Red Hat Enterprise Linux ICO file loader integer overflow (Nessus ID 348350 / WID-SEC-2026-3358) VVulDB Updates32 min. agoCVE-2026-90949 | Red Hat Enterprise Linux PSP file loader heap-based overflow (WID-SEC-2026-3358) VVulDB Updates1 hour agoCVE-2026-93518 | Xorg X11 Server Keyboard Mapping integer overflow (Nessus ID 367210) VVulDB Updates3 hours agoCVE-2026-62439 | GIMP File-PVR Plug-in integer overflow (EUVD-2026-103187)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4277804/vulnerabilities-cve/appsec-1247-block-cache-exploit/