https://firewallpulse.com/category/vulnerabilities/travesia-wordpress-theme-cwe-502-deserialization/Firewall Pulseen2026-10-11T13:48:56ZTravesia WordPress Theme CWE-502 Deserialization Vulnerability CVE-2026-93929 Hits v1.1.16 and Olderhttps://firewallpulse.com/category/vulnerabilities/tozed-x300-ippingdiagnostics-handler-vulnerable/Firewall Pulseen2026-10-11T13:16:55ZTOZED X300 IPPingDiagnostics Handler Vulnerable to Remote OS Command Injectionhttps://firewallpulse.com/category/cyber-attacks/inexpensive-androids-come-with-midnight-mimosa/Firewall Pulseen2026-10-11T12:43:52ZInexpensive Androids Come With Midnight Mimosa Firmware Bug for Ad Fraudhttps://firewallpulse.com/category/data-breaches/unprotected-internet-facing-interfaces-at-8-547/Firewall Pulseen2026-10-11T12:41:52ZUnprotected Internet-Facing Interfaces at 8,547 Global Renewable Sites Enable Remote Turbine Controlhttps://firewallpulse.com/category/vulnerabilities/wukong-hrm-paramaspect-auth-bypass-cve-2026/Firewall Pulseen2026-10-11T11:45:41ZWukong_HRM ParamAspect Auth Bypass CVE-2026-108707 Risks Remote HR Data Manipulation and Deletionhttps://firewallpulse.com/category/vulnerabilities/sitevault-1-5-19-code-injection-flaw-enables/Firewall Pulseen2026-10-11T08:31:00ZSiteVault 1.5.19: Code Injection Flaw Enables Critical Unauthenticated Remote Code Executionhttps://firewallpulse.com/category/vulnerabilities/tonda-membership-plugin-critical-auth-bypass-lets/Firewall Pulseen2026-10-11T08:31:00ZTonda Membership Plugin Critical Auth Bypass Lets Attackers Gain Admin Access Without Credentialshttps://firewallpulse.com/category/cyber-attacks/cctld-compromises-enable-issuance-of-fake-google/Firewall Pulseen2026-10-10T13:10:21ZccTLD Compromises Enable Issuance of Fake Google Domains Certificateshttps://firewallpulse.com/category/vulnerabilities/ahsaycbs-backup-platform-vulnerabilities/Firewall Pulseen2026-10-10T13:10:21ZAhsayCBS Backup Platform Vulnerabilities Exploited for Webshell and Miner Deploymenthttps://firewallpulse.com/category/cyber-attacks/shinyhunters-hit-as-fbi-detains-suspected-member/Firewall Pulseen2026-10-10T13:10:21ZShinyHunters Hit as FBI Detains Suspected Member in Cybercrime Crackdownhttps://firewallpulse.com/category/cloud-security/cloud-infra-systems-maker-oxide-hits-6b-value/Firewall Pulseen2026-10-10T13:10:21ZCloud Infra Systems Maker Oxide Hits $6B Value After $445M Eclipse-Led Series Dhttps://firewallpulse.com/category/vulnerabilities/aws-ops-wheel-flaws-cve-2026-6911-and-cve-2026/Firewall Pulseen2026-10-10T13:10:21ZAWS Ops Wheel flaws CVE-2026-6911 and CVE-2026-6912 expose infrastructure configshttps://firewallpulse.com/category/vulnerabilities/gutentype-object-injection-critical/Firewall Pulseen2026-10-10T09:23:12ZGutentype Object Injection: Critical Deserialization of Untrusted Data Affects Versions Through 2.1.12https://firewallpulse.com/category/vulnerabilities/convex-plugin-deserialization-vulnerability/Firewall Pulseen2026-10-10T08:48:00ZConvex Plugin Deserialization Vulnerability Enables Remote Object Injection on WordPress Siteshttps://firewallpulse.com/category/vulnerabilities/wpcom-member-authentication-bypass-allows/Firewall Pulseen2026-10-10T08:28:50ZWPCOM Member Authentication Bypass Allows Unauthorised Admin Access via Social Login Flawshttps://firewallpulse.com/category/vulnerabilities/themerex-greeny-object-injection-bug-affects-all/Firewall Pulseen2026-10-10T08:18:16ZThemeREX Greeny Object Injection Bug Affects All Versions to 2.10.0 With 9.8 CVSS Scorehttps://firewallpulse.com/category/vulnerabilities/tinacms-cli-rce-in-pre-3-0-0-versions-lets/Firewall Pulseen2026-10-10T08:14:44ZTinaCMS CLI RCE in Pre-3.0.0 Versions Lets Attackers Run Code via Git Branch Nameshttps://firewallpulse.com/category/vulnerabilities/proftpd-improper-access-control-cisa-sets-11/Firewall Pulseen2026-10-09T13:58:23ZProFTPD Improper Access Control: CISA Sets 11 October KEV Deadline