Vulnerabilities
Critical PHP Injection Flaw in DedeCMS Allows Remote Code Execution
Unauthenticated attackers can exploit CVE-2021-48016 in DedeCMS versions up to 5.8.1-beta to execute arbitrary PHP code via crafted HTTP headers.
Shadowserver Foundation
Everything Threat Times has reported about Shadowserver Foundation: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Unauthenticated Code Execution Flaw Found in Issuu Panel WordPress Plugin
A critical vulnerability in the Issuu Panel plugin allows attackers to execute remote PHP code via a file inclusion flaw before version 1.6.6.