Vulnerabilities
HestiaCP Authorization Bypass Lets Admins Impersonate Root Users
A high-severity flaw in HestiaCP versions prior to 1.10.5 allows non-root administrators to execute commands as the protected administrator's system account.
authorization bypass
Everything Firewall Chronicle has reported about authorization bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Avada Builder Hook Injection Flaw Lets Attackers Wipe Site Content Without Login
Unauthenticated attackers can trigger arbitrary WordPress hooks in Avada Builder versions up to 7.16.1, causing irreversible site damage.