VulnVibes

Daily Summary of WordPress critical and high vulnerabilities

Daily Summary of WordPress critical and high vulnerabilities

Daily Summary of WordPress critical and high vulnerabilities

Three security vulnerabilities found in the open-source PHP package Voyager, used for managing Laravel applications, could allow remote code execution attacks.

Daily Summary of WordPress critical and high vulnerabilities

Daily Summary of WordPress critical and high vulnerabilities

Wiz Research discovered a publicly accessible ClickHouse database owned by DeepSeek, granting full control over database operations and access to internal data. This exposure included over a million lines of log streams containing chat history, secret keys, backend details, and other highly sensitive information. The Wiz Research team promptly and responsibly reported the issue to DeepSeek, which swiftly secured the vulnerability.

Daily Summary of WordPress critical and high vulnerabilities

Broadcom has issued an alert regarding a high-severity security vulnerability in VMware Avi Load Balancer, identified as CVE-2025-22217, with a CVSS score of 8.6. This unauthenticated blind SQL injection flaw allows malicious actors with network access to execute specially crafted SQL queries, potentially granting them unauthorized access to the database.

A severe security vulnerability has been revealed in the Cacti open-source network monitoring and fault management framework, potentially enabling an authenticated attacker to execute remote code on vulnerable instances.