EILMELDUNGEN LIVE
YouTube Security VideosGoogle Cloud Tech: An industry look into AI generated images & videos in fashion(30.10.2026 um 00:00 Uhr)
•
YouTube Security VideosCan you commit to the answer? Git trivia at GitHub Universe 2026(29.10.2026 um 23:13 Uhr)
•
YouTube Security VideosAndroid Developers: Trace me if you can: Automated instrumentation and field profiling(29.10.2026 um 23:29 Uhr)
•
Sichere ProgrammierungInformation Disclosure of Unpublished Changesets in WordPress Customizer(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungUnescaped User Login and Display Name Output in WordPress User Management Screens(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungRemote Code Execution via Race Condition in the WordPress Upgrade Working Directory(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungAuthenticated (Contributor+) Stored Cross-Site Scripting via WordPress Customizer Selective Refresh(29.10.2026 um 18:55 Uhr)
•
Sicherheitslücken (CVE)Stored Cross-Site Scripting in YITH WooCommerce Wishlist Move-to-Wishlist Popup(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungStored Cross-Site Scripting in WordPress Personal Data Request Screens(29.10.2026 um 18:55 Uhr)
•
Sicherheitslücken (CVE)SQL Injection in Amelia Booking Payments Sort and Package Coupon Filter(29.10.2026 um 18:55 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: An industry look into AI generated images & videos in fashion(30.10.2026 um 00:00 Uhr)
•
YouTube Security VideosCan you commit to the answer? Git trivia at GitHub Universe 2026(29.10.2026 um 23:13 Uhr)
•
YouTube Security VideosAndroid Developers: Trace me if you can: Automated instrumentation and field profiling(29.10.2026 um 23:29 Uhr)
•
Sichere ProgrammierungInformation Disclosure of Unpublished Changesets in WordPress Customizer(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungUnescaped User Login and Display Name Output in WordPress User Management Screens(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungRemote Code Execution via Race Condition in the WordPress Upgrade Working Directory(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungAuthenticated (Contributor+) Stored Cross-Site Scripting via WordPress Customizer Selective Refresh(29.10.2026 um 18:55 Uhr)
•
Sicherheitslücken (CVE)Stored Cross-Site Scripting in YITH WooCommerce Wishlist Move-to-Wishlist Popup(29.10.2026 um 18:55 Uhr)
•
Sichere ProgrammierungStored Cross-Site Scripting in WordPress Personal Data Request Screens(29.10.2026 um 18:55 Uhr)
•
Sicherheitslücken (CVE)SQL Injection in Amelia Booking Payments Sort and Package Coupon Filter(29.10.2026 um 18:55 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Remote Code Execution via Race Condition in the WordPress Upgrade Working Directory

WordPress unpacked update packages into a predictably named, web-served directory under wp-content/upgrade/. While an update was running, an unauthenticated…

Sichere Programmierung Vulnerability definition feed 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (Vulnerability definition feed)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

WordPress unpacked update packages into a predictably named, web-served directory under wp-content/upgrade/. While an update was running, an unauthenticated attacker could reach the unpacked files and get a wp-config.php written into that directory copied over the site's configuration, which can lead to remote code execution. The fix gives the... Weiterlesen: Remote Code Execution via Race Condition in the WordPress Upgrade Wor…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
5 Knoten · 4 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

İlgili Story Cluster & Kaynaklar (vector AI)

14 Kaynaklar
Stored Cross-Site Scripting in YITH WooCommerce Wishlist Move-to-Wishlist Popup
13 diğer kaynaklar
Vulnerability definition fe…vor 5 Std.Stored Cross-Site Scripting in WordPress Personal Data Request Screens Vulnerability definition fe…vor 5 Std.Stored Cross-Site Scripting in ElementsKit Simple Tab Widget Vulnerability definition fe…vor 5 Std.Reflected Cross-Site Scripting in UpdraftPlus Restore Page Vulnerability definition fe…vor 5 Std.Stored Cross-Site Scripting in Ultimate Addons for Elementor Navigation Menu Icons Vulnerability definition fe…vor 5 Std.Authenticated (Contributor+) Stored Cross-Site Scripting via WordPress Block Delimiter Whitespace Vulnerability definition fe…vor 5 Std.Stored Cross-Site Scripting in WordPress Interactivity API Object Bindings
+7
13 Kaynaklar
CVE-2026-82632 | GitLab up to 19.2.7/19.3.4/19.4.1 Import improper authorization (WID-SEC-2026-3858)
12 diğer kaynaklar
VulDB Updatesvor 1 Std.CVE-2026-9268 | GitLab up to 19.2.7/19.3.4/19.4.1 CI/CD Deployment Rollback Settings privileges management (WID-SEC-2026-3858) VulDB Updatesvor 3 Std.CVE-2026-105458 | GitLab up to 19.2.7/19.3.4/19.4.1 Duo Agent Platform permission (WID-SEC-2026-3858) VulDB Updatesvor 3 Std.CVE-2026-104661 | GitLab up to 19.2.7/19.3.4/19.4.1 Compliance Pipeline permission (WID-SEC-2026-3858) VulDB Updatesvor 3 Std.CVE-2026-14552 | GitLab up to 19.2.7/19.3.4/19.4.1 Epic improper authorization (WID-SEC-2026-3858) VulDB Updatesvor 3 Std.CVE-2026-14814 | GitLab up to 19.2.7/19.3.4/19.4.1 CI/CD Pipeline input validation (WID-SEC-2026-3858) VulDB Updatesvor 3 Std.CVE-2026-16275 | GitLab up to 19.2.7/19.3.4/19.4.1 improper authorization (WID-SEC-2026-3858)
+6
8 Kaynaklar
CVE-2026-115943 | Spreadsheet::XLSX up to 0.18 ExcelFmt os command injection (EUVD-2026-113403)
7 diğer kaynaklar
VulDB Updatesvor 1 Std.CVE-2026-51832 | IDrive Backup up to 7.0.1.1 id_service.exe os command injection (EUVD-2026-113367) VulDB Updatesvor 1 Std.CVE-2026-51831 | IDrive Backup for Windows up to 7.0.1.1 id_service.exe os command injection (EUVD-2026-113368) VulDB Updatesvor 49 Min.CVE-2022-48124 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg FileName command injection (EUVD-2022-50836) VulDB Updatesvor 49 Min.CVE-2022-48126 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg username command injection (EUVD-2022-50838) VulDB Updatesvor 49 Min.CVE-2022-48125 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg password command injection (EUVD-2022-50837) VulDB Updatesvor 4 Std.CVE-2024-45257 | BYOB 2.0 Payload Build Page core/generators.py build command injection
+1

Mehr aus dieser Kategorie

Information Disclosure of Unpublished Changesets in WordPress Customizer
29.10.2026
Unescaped User Login and Display Name Output in WordPress User Management Screens
29.10.2026
Authenticated (Contributor+) Stored Cross-Site Scripting via WordPress Customizer Selective Refresh
29.10.2026
Stored Cross-Site Scripting in WordPress Personal Data Request Screens
29.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Update to Update
TTS Reader • tsecurity.de Voice
Nächster Beitrag