--- title: "Y45NG (@Y45N) | Hashnode" description: "CybrExp. Read the latest articles by Y45NG on Hashnode." url: "https://hashnode.com/@Y45N" --- @Y45N # Y45NG @Y45N · Joined April 2024 CybrExp [Website](https://haysec.com/) ### [CVE-2025-3436: Multiple SQL Injection in coreActivity Activity Logging plugin for WordPress - Report](https://blog.haysec.com/cve-2025-3436-multiple-sql-injection-in-coreactivity-activity-logging-plugin-for-wordpress-report?utm_source=hashnode&utm_medium=feed) Reference / Advisory Number : CVE-2025-3436 Vulnerable WordPress Plugin Link: https://wordpress.org/plugins/coreactivity/ Description of the vulnerability The coreActivity Activity Logging plugin for WordPress suffers from a time based SQL injection ... 3 min read · [blog.haysec.com](https://blog.haysec.com/cve-2025-3436-multiple-sql-injection-in-coreactivity-activity-logging-plugin-for-wordpress-report?utm_source=hashnode&utm_medium=feed) [Oct 21, 2025](https://hashnode.com/posts/cve-2025-3436-multiple-sql-injection-in-coreactivity-activity-logging-plugin-for-wordpress-report/68f7f5de35b7ec7f1fa932ec) ### [CVE-2025-3809 in Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting](https://blog.haysec.com/cve-2025-3809-in-debug-log-manager-234-unauthenticated-stored-xss?utm_source=hashnode&utm_medium=feed) Recently, our team initiated a security review of «Debug Log Manager» (WordPress plugins). As part of this effort, we set up a new WordPress instance in Docker locally and began installing widely used plugins to test them in a controlled environment.... 2 min read · [blog.haysec.com](https://blog.haysec.com/cve-2025-3809-in-debug-log-manager-234-unauthenticated-stored-xss?utm_source=hashnode&utm_medium=feed) [Aug 21, 2025](https://hashnode.com/posts/cve-2025-3809-in-debug-log-manager-234-unauthenticated-stored-xss/68a79a5677fed0215b514513) ### [CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect](https://blog.haysec.com/cve-2024-3400-pan-os-arbitrary-file-creation-leads-to-os-command-injection-vulnerability-in-globalprotect?utm_source=hashnode&utm_medium=feed) Critical vulnerability in PAN-OS GlobalProtect allows OS command injection. Upgrade to secure versions 10.2.9-h1, 11.0.4-h1, 11.1.2-h3 for protection 2 min read · [blog.haysec.com](https://blog.haysec.com/cve-2024-3400-pan-os-arbitrary-file-creation-leads-to-os-command-injection-vulnerability-in-globalprotect?utm_source=hashnode&utm_medium=feed) [Apr 23, 2024](https://hashnode.com/posts/cve-2024-3400-pan-os-arbitrary-file-creation-leads-to-os-command-injection-vulnerability-in-globalprotect/6627cf0b69aa668591b31f39) ### [Strengthening Security Measures: Transitioning to DevSecOps from DevOps](https://blog.haysec.com/strengthening-security-measures-transitioning-to-devsecops-from-devops?utm_source=hashnode&utm_medium=feed) Enhance security and efficiency by transitioning to DevSecOps from DevOps. Prioritize security from the start of development 2 min read · [blog.haysec.com](https://blog.haysec.com/strengthening-security-measures-transitioning-to-devsecops-from-devops?utm_source=hashnode&utm_medium=feed) [Apr 23, 2024](https://hashnode.com/posts/strengthening-security-measures-transitioning-to-devsecops-from-devops/6627ca3451a521fefa6da23d)