{"id":33637,"date":"2020-03-03T20:25:59","date_gmt":"2020-03-03T20:25:59","guid":{"rendered":"http:\/\/c1ec46be-5ea5-4a31-9290-084b063ed5ad"},"modified":"2020-03-03T20:25:59","modified_gmt":"2020-03-03T20:25:59","slug":"academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/","title":{"rendered":"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums"},"content":{"rendered":"

\"KAIST<\/span>Image: KAIST<\/span> <\/p>\n

\n

techrepublic cheat sheet<\/span><\/h3>\n<\/div>\n

Through the use of an automated testing toolkit, a team of South Korean academics has discovered 30 vulnerabilities in the file upload mechanisms used by 23 open-source web applications, forums, store builders, and content management systems (CMSes).<\/p>\n

When present in real-world web apps, these types of vulnerabilities allow hackers to exploit file upload forms and plant malicious files on a victim’s servers.<\/p>\n

These files could be used to execute code on a website, weaken existing security settings, or function as backdoors, allowing hackers full control over a server.<\/p>\n

Academics built their own testing tool<\/h3>\n

All the file-uploading vulnerabilities were discovered using FUSE, a new automated penetration testing tool created to uncover UFU (unrestricted file upload) and UEFU (unrestricted executable file upload) vulnerabilities in PHP applications.<\/p>\n

The research team said that prior to building FUSE<\/a> they analyzed past file upload bugs and identified the eight most common exploitation patterns and techniques.<\/p>\n

FUSE consists of these eight patterns, along with five new variations devised by the research team (see M5, M7, M9, M10, and M13 in the table below).<\/p>\n

\"uefu-1.png\"<\/span>

\"uefu-1.png\"<\/span><\/p>\n

<\/noscript> Image: Lee et al.<\/span><\/p>\n

After they built FUSE, the research team said they selected the 33 most popular web apps, including the likes of forums, CMSs, enterprise products, and online store builders.<\/p>\n

\n<\/section>\n

The research team, which consisted of academics from the Korea Advanced Institute of Science and Technology Constitution (KAIST<\/a>) and the Electronics and Telecommunications Research Institute (ETRI), said they individually tested FUSE against the latest versions of those web apps (at the time of the tests, in February 2019).<\/p>\n

Using a series of automated requests, the researchers exploited file upload mechanisms in the 33 web apps in an attempt to plant various types of malicious files (PHP, JS, HTML, XHTML, htaccess) inside one of the tested web apps.<\/p>\n

KAIST and ETRI researchers said the tests unearthed 30 file upload bugs impacting 23 of the 33 applications they tested.<\/p>\n

\"uefu-2.png\"<\/span>

\"uefu-2.png\"<\/span><\/p>\n

<\/noscript> Image: Lee et al.<\/span><\/p>\n

Not all bugs have been patched.<\/h3>\n

The tests took place in February 2019, and the table may contain web apps that have received updates during the past year. However, KAIST and ETRI researchers said that not all projects have patched the bugs they found, and some of the projects highlighted in yellow above may still contain one or more file upload bugs.<\/p>\n

“We reported all the 30 UEFU vulnerabilities to the corresponding vendors and obtained 15 CVEs from nine applications,” the research team said.<\/p>\n

“Eight vulnerabilities from five vendors have been patched. Five vulnerabilities from four vendors, including WordPress, confirmed that they would address the reported vulnerabilities,” researchers added.<\/p>\n

“15 bugs are awaiting confirmation from the corresponding vendors. Two vendors declined to patch the reported bugs.”<\/p>\n

As the researchers explain, a reason why some vendors didn’t prioritize patches — or downright refused to patch — was because 14 of the 30 bugs required admin access to exploit, a criteria that many projects don’t consider to be a risk since a hacker with admin access can hijack a server through legitimate CMS features anyway.<\/p>\n

But while KAIST and ETRI researchers listed the web apps that contained bugs, they didn’t list which projects patched and which did not — in an attempt to prevent attacks against web apps that did not ship a patch yet.<\/p>\n

Additional details, including the testing methodology, are available in the research team’s white paper named “FUSE: Finding File Upload Bugs via Penetration Testing<\/em>,” and available for download in PDF format from here<\/a> and here<\/a>.<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Impacted projects include WordPress, Concrete5, Composr, SilverStripe, ZenCart, and others.
\nREAD MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":33638,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-33637","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"\nAcademics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-03T20:25:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"365\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums\",\"datePublished\":\"2020-03-03T20:25:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/\"},\"wordCount\":587,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/\",\"name\":\"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg\",\"datePublished\":\"2020-03-03T20:25:59+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg\",\"width\":770,\"height\":365},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/","og_locale":"en_US","og_type":"article","og_title":"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-03-03T20:25:59+00:00","og_image":[{"width":770,"height":365,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums","datePublished":"2020-03-03T20:25:59+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/"},"wordCount":587,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/","url":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/","name":"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg","datePublished":"2020-03-03T20:25:59+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums.jpg","width":770,"height":365},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/33637","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=33637"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/33637\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/33638"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=33637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=33637"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=33637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}