KKAA Solutions

Malware analysis. Incident response. Remediation of hacked websites/servers.

[KKAA Solutions @kkaasolutions]

Το site σας παραβιάστηκε; Ανακατευθύνσεις, spam, «μαύρη λίστα» στο Google;

Χειροκίνητος καθαρισμός αρχείων & βάσης + γραπτή αναφορά. WordPress/Joomla από 220€ + ΦΠΑ, σταθερή τιμή πριν ξεκινήσουμε.

👉 https://t.co/XEAYvVhijZ

#WordPress #Ασφάλεια #Malware #eshop

[KKAA Solutions @kkaasolutions]

WordPress 7.1.4 fixes an exploited updater race (CVE-2026-119977). The twist: the fix is installed by the old, vulnerable code.

We dissected it in our lab: line-by-line diff, timed window, tested nginx/Apache blocks. 73s video inside.

https://t.co/q79Kv9GAoC

#WordPress

[KKAA Solutions @kkaasolutions]

CVE-2026-123550 (CRITICAL / 9.8) — OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsi... https://t.co/TKkgGxKAP5 #server #web #cve #kkaasolutions

[KKAA Solutions @kkaasolutions]

CVE-2026-97195 (N/A) — The Secure Custom Fields WordPress plugin before 6.9.8 does not sanitize a persisted field definition before emitting pa... https://t.co/HZKPEr5aob #wordpress #cve #kkaasolutions

[KKAA Solutions @kkaasolutions]

@tiboadriana KKAA Solutions is a specialised website malware removal and incident response company. Manual work on files, database and server, a written report on every job, and prices you can read before you call us. https://t.co/8flG2hHExN

[KKAA Solutions @kkaasolutions]

The owner manually cleaned the #site. Then called a team to clean it again. "The #malware keeps coming back."

No #webshell, no fake plugin, no exploit, just a real admin password and a tool from the official plugin directory.

https://t.co/YCjHJ8phff #WordPress #DFIR

[KKAA Solutions @kkaasolutions]

@ishanxtwt If cooking videos keep flooding my feed like this, they’re going to go from 11 to 12 very soon.

[KKAA Solutions @kkaasolutions]

CVE-2026-63017 (CRITICAL / 9.0) — Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally l... https://t.co/sgfhX8qgzB #server #web #cve #kkaasolutions

[KKAA Solutions @kkaasolutions]

CVE-2026-119516 (CRITICAL / 9.8) — Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &am... https://t.co/muW9XmwEiG #wordpress #cve #kkaasolutions

[KKAA Solutions @kkaasolutions]

CVE-2026-120844 (CRITICAL / 9.8) — Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-wi... https://t.co/umbH1OlD6d #wordpress #cve

[KKAA Solutions @kkaasolutions]

CVE-2026-88800 (CRITICAL / 9.1) — The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 act on a role deletion request on ... https://t.co/PaM5Nhj744 #wordpress #cve #kkaasolutions

[KKAA Solutions @kkaasolutions]

CVE-2026-123294 (CRITICAL / 9.6) — In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during t... https://t.co/qiarY6YAPy #server #web #kkaasolutions

[KKAA Solutions @kkaasolutions]

CVE-2026-114630 (CRITICAL / 9.1) — The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion du... https://t.co/3FLWWSl57T #wordpress #cve

[KKAA Solutions @kkaasolutions]

CVE-2026-123488 (CRITICAL / 9.8) — #CraftCMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the ele... https://t.co/dPta5vx0rJ #server #web

[KKAA Solutions @kkaasolutions]

CVE-2026-59105 (CRITICAL / 9.8) — Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password is... https://t.co/Y1nOc13SgD #server #web

[KKAA Solutions @kkaasolutions]

CVE-2026-122193 (CRITICAL / 9.9) — OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28... https://t.co/N9h41sR199 #server #web

[KKAA Solutions @kkaasolutions]

CVE-2026-119923 (CRITICAL / 9.8) — A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-... https://t.co/pNugIpAxBZ #PostgreSQL

[KKAA Solutions @kkaasolutions]

@zazzy_stardust PG not API.

[KKAA Solutions @kkaasolutions]

#sshole Dissected: How 300 A's Log In to a Passwordless Alpine Account Over SSH (CVE-2026-123158)

📖 Full dissection + video: https://t.co/Q8GtZsgJkN

#CyberSecurity #InfoSec #Linux #OpenSSH #AlpineLinux #VulnerabilityResearch #SSH #DevSecOps #ServerSecurity #IncidentResponse

[KKAA Solutions @kkaasolutions]

@itcaat Hahahahaha!! Epic!