Sploitus Multiple CVEs Expose Vulnerabilities in Cybersecurity Tools and Applications
Article Content
- •CVE-2024-51482 allows SQL injection in ZoneMinder, affecting versions 1.37.*.
- •CVE-2026-22557 is a path traversal vulnerability in Ubiquiti UniFi applications.
- •CVE-2018-6389 can bring down WordPress sites running versions below 4.9.3.
A series of vulnerabilities have been reported affecting various cybersecurity tools and applications. Notable among them is CVE-2024-51482, a blind SQL injection vulnerability in ZoneMinder, allowing attackers to execute arbitrary SQL commands on the database server. CVE-2026-22557, a path traversal vulnerability in Ubiquiti UniFi, enables unauthorized access to sensitive files. Additionally, CVE-2018-6389 affects WordPress sites, allowing attackers to take down sites running versions below 4.9.3. Exploits for these vulnerabilities are publicly available, with active exploitation confirmed for some. Tools and proof-of-concept codes have been released for these vulnerabilities, increasing the urgency for organizations to patch their systems. The vulnerabilities impact a wide range of users, from individual website owners to organizations using surveillance software.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (100)
Following this threat?
Track CVE-2018-6389 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting… Critical Path Traversal Vulnerability in Postiz Exposes Server Files A critical vulnerability, CVE-2026-115932, has been identified in Postiz, allowing unauthenticated users to exploit path traversal flaws. This vulnerability permits registered users to craft media paths that bypass directory restrictions, enabling access to arbitrary server files. Attackers can exfiltrate sensitive…