Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 7m ago

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

today 46 visits · 59 views · 7 reads·all time 17K views

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 7m ago

#miniorange — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#miniorange

0 stories this week · 1 this month · 4 in 6 months · mostly security

stories per day · 30 days

Related#auth-bypass 1 #poc 1 #webapps 1

4 stories, newest first · one card per story

Latest Top

Exploit-DB·26d ago

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

#auth-bypass #miniorange #poc

Exploit / PoC

Security Affairs·Aug 25, 2026 critical

Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

#actively-exploited #algorithm-confusion #authentication-bypass

in the wild 5 min

The Hacker News·Aug 25, 2026 high

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

#authentication-bypass #digitalocean #miniorange

in the wild 2 min

Patchstack·Aug 21, 2026 high

One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin

#authentication-bypass #digitalocean #miniorange