WordPress versions 6.9 and higher are vulnerable to a REST API batch-route confusion weakness, which combined with an SQL injection issue (GHSA-fpp7-x2x2-2mjf) leads to Remote Code Execution.

WordPress versions 7.0.2, 6.9.5, and 7.1 beta2 have been released, containing fixes for the vulnerability.
Due to the severity of the vulnerability it is recommended that you update your sites immediately.
Discovered and responsibly disclosed by Adam Kues at Assetnote / Searchlight Cyber.

WordPress versions 6.8 and higher are vulnerable to an SQL injection issue.
In WordPress versions 6.9 and higher, this combined with a REST API batch-route confusion issue (GHSA-ff9f-jf42-662q) leads to Remote Code Execution.

WordPress versions 7.0.2, 6.9.5, 6.8.6, and 7.1 beta2 have been released, containing fixes for the vulnerability.
Due to the severity of the vulnerability it is recommended that you update your sites immediately.
Discovered and responsibly disclosed as a team by TF1T, dtro, and haongo.

Last year we announced a partnership with Epic Games to bring Unity to Fortnite - and today, we want to show you where we are.

This is Fantasy Kingdom: a Unity game rendering natively inside @UnrealEngine. Physics, lighting, input: all synchronized between engines🎮👇

🔗 Want to try it out for yourself? Fill out our interest form to be considered for early access: https://on.unity.com/Fortnite_InterestForm

Introducing Happy Oyster, the groundbreaking real-time world model from @HappyOysterAI, live today on Reactor!

Explore any world you can imagine, or take the director's chair and shape the story as it happens.

Available via API.

Try it now: http://reactor.inc/happy-oyster

Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: Medium)

Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

  cacheData := cacheMap.Get(key)
  if cacheData == nil {
    cacheData = &BinanceDepthCachedData{
      Coin:       key,
      LastUsedAt: time.Now(),
    }
    cacheMap.Add(key, cacheData)
  }

Goroutine A: Get → nil
Goroutine B: Get → nil
Goroutine A: Add(objectA)
Goroutine B: Add(objectB)

  mut := hlInfoReqMutexes.GetOrCreateDefault(mutKey)
  mut.Lock()
  defer mut.Unlock()

v := cache.Get(key)
if v == nil {
    v = parseConfig(key)
    cache.Add(key, v)
}

A creates objectA and continues using it
B creates objectB and stores it
A stores objectA—or B remains the winner

lock := locks.Get(accountID)
if lock == nil {
    lock = &sync.Mutex{}
    locks.Add(accountID, lock)
}

lock.Lock()
defer lock.Unlock()
processWithdrawal(accountID)