Company Name: TikTok Company HackerOne URL: https://hackerone.com/tiktok Submitted By:ahmed_xyzLink to Submitters Profile:https://hackerone.com/ahmed_xyz Report Title:Stored XSS on TikTok's backend leads to...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:0xreyLink to Submitters Profile:https://hackerone.com/0xrey Report Title:TOCTOU Race Condition in HTTP/2 Connection Reuse...
Company Name: TikTok Company HackerOne URL: https://hackerone.com/tiktok Submitted By:eneriLink to Submitters Profile:https://hackerone.com/eneri Report Title:Chained Broken Access Control in TikTok Live...
CVE-2025-9018 HIGHNo exploitation known The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due...
CVE-2025-9874 HIGHNo exploitation known The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions...
CVE-2025-8417 HIGHNo exploitation known The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in...
CVE-2025-9693 HIGHNo exploitation known The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable...
CVE-2025-8422 HIGHNo exploitation known The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in...
CVE-2025-9073 HIGHNo exploitation known The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'post_id'...
CVE-2025-8425 HIGHNo exploitation known The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can...
App security outfit Checkmarx says automated reviews in Anthropic's Claude Code can catch some bugs but miss others – and...
Finnish phone maker HMD Global is launching a business unit called HMD Secure to target governments and other security-critical customers,...
Jaguar Land Rover (JLR) says "some data" was affected after the luxury car maker suffered a digital break-in early last...
Feature Jaguar Land Rover (JLR) is the latest UK household name to fall victim to a major cyberattack. IT systems...
Atlassian is discontinuing its datacenter products, including Jira, Confluence and Bamboo, in favor of Atlassian Cloud. There is a partial...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
