[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-58996":3,"landing-trending":60,"landing-articles":91},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":24,"references":25,"score":27,"epss_score":28,"epss_percentile":29,"is_kev":30,"cisa_kev_date_added":31,"cisa_kev_due_date":31,"cisa_ssvc":32,"attack_mappings":42,"exploits":59},65209,"CVE-2025-58996","EUVD-2025-38133","Unrestricted Upload of File with Dangerous Type vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Upload a Web Shell to a Web Server.This issue affects Advanced Settings: from n\u002Fa through \u003C= 3.1.1.","2025-11-06T16:16:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":17},"CHANGED","3.1",9.1,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",true,[22],"CWE-434",[],[],[26],"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002FWordpress\u002FPlugin\u002Fadvanced-settings\u002Fvulnerability\u002Fwordpress-advanced-settings-plugin-3-1-1-arbitrary-file-upload-vulnerability?_s_id=cve",0.66,0.00454,0.39171,false,null,{"timestamp":33,"automatable":34,"tech_impact":35,"exploitation":36,"cisa_decision":37,"cisa_remediation_timeline":41},"2025-11-17T15:51:01.746866Z","no","total","none",{"vector":38,"decision":39,"priority":40},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-27T11:43:13.514873\u002F","track_star","medium","14D",[43,49],{"name":44,"source":45,"tactics":46,"technique_id":48},"Exploit Public-Facing Application","attack_vector",[47],"initial-access","T1190",{"name":50,"source":51,"cwe_ids":52,"tactics":53,"capec_ids":56,"technique_id":58},"Services File Permissions Weakness","capec",[22],[54,55],"execution","stealth",[57],"CAPEC-1","T1574.010",[],{"count":61,"next":62,"previous":31,"results":63},270,"http:\u002F\u002Fweb:8606\u002Fapi\u002Ftrending_attacks\u002F?page=2&page_size=3&sorted_by=-published_at",[64,73,83],{"id":65,"title":66,"summary":67,"published_at":68,"severity":69,"vendor":70,"products":71},269,"Umbraco CMS - Back-Office Account Takeover via Sign-In Redirect Manipulation (Open Redirect & Origin Validation Error & Improper Authentication)","Umbraco CMS is an open-source ASP.NET Core content management system used to build and administer websites, with a back-office interface for editors, administrators and developers.\r\n\r\nGHSA-rpv9-qp4c-g469\r\n\r\nSeveral weaknesses in the back-office sign-in flow (open redirect — CWE-601, origin validation error — CWE-346, and improper authentication — CWE-287) can be chained so that an authenticated back-office user's session is handed to an attacker. No account is needed to prepare the attack, but a signed-in back-office user must open a link supplied by the attacker. Sites are exposed where the web server or hosting setup passes requests for unrecognised host names through to Umbraco — common when running on Kestrel directly, in IIS without host name bindings, or behind a reverse proxy that forwards the Host header unchanged. If the attack succeeds, the attacker obtains a back-office session with the privileges of the victim; for an administrator this means full control over content, users and configuration, and can lead to server-side code execution. Affected versions: \u003C= 17.7.1 and \u003C= 18.2.1. Fixed in 17.7.2 and 18.2.2: the sign-in flow now only accepts redirects to the serving host or explicitly configured hosts, and sign-in codes are hardened so they can be redeemed only by the back-office itself (this also protects sites with pre-tampered sign-in configuration). No configuration setting resolves the issue; interim mitigations are to restrict host names reaching the application (e.g. AllowedHosts in appsettings.json or explicit web-server\u002Freverse-proxy host bindings), avoid opening untrusted back-office links while signed in, and audit the redirect URIs stored for the umbraco-back-office and umbraco-swagger OpenIddict clients for foreign host names.","2026-10-27T09:04:25.416020Z",4,"Umbraco",[72],"Umbraco CMS",{"id":61,"title":74,"summary":75,"published_at":76,"severity":69,"vendor":77,"products":78},"Adobe Commerce (Magento) - Unrestricted Upload of File with Dangerous Type leading to Arbitrary Code Execution","Adobe Commerce (formerly Magento Commerce) and Magento Open Source are e-commerce platforms widely used for online storefronts, catalog and order management; Commerce B2B adds B2B trade features and I\u002FO Events is Adobe's event-driven integration connector for Commerce.\r\n\r\nCVE-2026-48356\r\n\r\nAdobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434) that could result in arbitrary code execution in the context of the current user, potentially giving an attacker elevated access or control over the victim's account or session. Exploitation requires user interaction: a victim must visit a maliciously crafted URL or interact with a compromised web page; scope is changed (S:C), meaning impact extends beyond the vulnerable component. Affected versions include Adobe Commerce 2.4.4 through 2.4.9, Adobe Commerce B2B 1.3.3–1.5.3 (1.3.3, 1.3.4, 1.4.2, 1.5.2, 1.5.3), Magento Open Source 2.4.6–2.4.9, and Adobe I\u002FO Events for Commerce >= 1.6.0, \u003C 1.21.0. The flaw was fixed via Adobe's APSB26-73 security bulletin; NVD lists no standalone fixed version numbers, so administrators should apply the patches from that bulletin. A public proof of concept exists, but no exploitation has been attested and the CVE is not in the CISA KEV catalog (EPSS ~1.0%).","2026-10-27T08:52:02.175915Z","Adobe",[79,80,81,82],"Adobe Commerce","Adobe Commerce B2B","Magento Open Source","Adobe I\u002FO Events (Commerce connector)",{"id":84,"title":85,"summary":86,"published_at":87,"severity":69,"vendor":88,"products":89},268,"Multiple Vulnerabilities in GLPI - MFA Bypass & Authentication Bypass via Unverified X.509 Certificate & Unauthenticated SQL Injection & Arbitrary File Deletion","GLPI is a free, open-source IT service management (ITSM) \u002F IT asset management (ITAM) platform used to track assets, manage incidents and service requests, and administer helpdesk operations.\r\n\r\nGHSA-3rr2-mxv6-rmc2\r\n\r\nAn attacker able to steal a GLPI user's password reset token can log in to that user's account without being required to complete two-factor authentication verification, effectively bypassing the MFA control. Affected versions: GLPI >= 11.0.0. Fixed in GLPI 11.0.9.\r\n\r\nGHSA-5jg3-2qx2-gq7g\r\n\r\nWhen X.509 client-certificate authentication is enabled and the web server is configured insecurely, an attacker can craft a self-signed certificate and have it accepted by GLPI, impersonating a legitimate user. Affected versions: >= 0.71, \u003C 11.0.0 and >= 11.0.0. Fixed in GLPI 10.0.27 and 11.0.9; as a workaround, set Apache to SSLVerifyClient optional or required instead of optional_no_ca.\r\n\r\nGHSA-753w-2942-4pxm\r\n\r\nAn unauthenticated remote attacker can exploit a time-based blind SQL injection in the planning (calendar) feature, which researchers warn can allow reading the entire GLPI application database and, depending on the version, lead to administrator account takeover and remote code execution. Affected versions: GLPI >= 11.0.8. Fixed in GLPI 11.0.9.\r\n\r\nGHSA-m9x5-44w4-jj4g\r\n\r\nA GLPI user holding document-creation rights can craft malicious requests during document creation to delete arbitrary files on the web server, compromising integrity and availability. Affected versions: >= 0.78, \u003C 11.0.0 and >= 11.0.0. Fixed in GLPI 10.0.27 and 11.0.9.","2026-10-27T08:42:59.887440Z","GLPI Project",[90],"GLPI",{"count":92,"next":93,"previous":31,"results":94},26,"http:\u002F\u002Fweb:8606\u002Fapi\u002Farticles\u002F?page=2&page_size=3&sorted_by=-published_at",[95,103,111],{"id":96,"title":97,"summary":98,"published_at":99,"type":100,"link":101,"image_url":102},30,"PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)","Unauthenticated code execution demonstrated on WordPress, Drupal and Joomla, and reproduced in our lab. Patched versions and steps to take today.","2026-10-22T00:00:00Z","cve","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fc0615c4ee6-1792684469\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2.png",{"id":104,"title":105,"summary":106,"published_at":107,"type":108,"link":109,"image_url":110},29,"Manage External Security Across All Your Entities","Centralize the management of entities, users and external security resources while maintaining strict data isolation with Patrowl.","2026-09-15T00:00:00Z","security tips","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fmulti-entity-external-security-how-structure-governance-group-level","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F8b2c0cc5eb-1789551467\u002Fvisu_1_multi_tenancy_dark_1x.webp",{"id":112,"title":113,"summary":114,"published_at":115,"type":116,"link":117,"image_url":118},28,"Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34","Tax law, finance, legislation: Bruce Schneier shows how AI could hack human rule systems just as easily as it hacks software.","2026-09-14T00:00:00Z","hacks","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fbruce-schneier-def-con-34","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F5c616d9db4-1789462598\u002Fai-hacker.en.png"]