#CVE #Research
Turan Security xodimi Jamshid Yergashvoyev Security Researcher - tadqiqotchi sifatida 17 yoshida 2 ta CVE olishga erishdi! Bu yutuq nafaqat davlatimiz, balki O'rta Osiyo uchun yosh kesimida birinchi hisoblanadi.🔥
Zaifliklar WordPress plaginlaridan biri - Wp-DownloadManagerda aniqlangan:
▪️ 1. Arbitrary File Read (CVE-2025-4798)
Zaiflik darajasi: 4.9 (Medium);
Sana: 10-iyun, 2025
▪️ 2. Arbitrary File Deletion (CVE-2025-4799)
Zaiflik darajasi: 7.2 (High);
Sana: 10-iyun, 2025
@TuranSecurity | www.turansec.uz |
Turan Security xodimi Jamshid Yergashvoyev Security Researcher - tadqiqotchi sifatida 17 yoshida 2 ta CVE olishga erishdi! Bu yutuq nafaqat davlatimiz, balki O'rta Osiyo uchun yosh kesimida birinchi hisoblanadi.🔥
CVE nima o‘zi?
CVE (Common Vulnerabilities and Exposures) — bu kiberxavfsizlik sohasida aniqlangan zaifliklarni yagona va standart formatda ro‘yxatga oluvchi xalqaro tizimdir. Har bir zaiflikga takrorlanmas identifikator (masalan: CVE-2025-4798) beriladi. Ushbu tizim butun dunyo mutaxassislari va tashkilotlari tomonidan tahdidlarni aniqlash, baholash va ularni bartaraf etish uchun ishlatiladi.
Zaifliklar WordPress plaginlaridan biri - Wp-DownloadManagerda aniqlangan:
▪️ 1. Arbitrary File Read (CVE-2025-4798)
Zaiflik darajasi: 4.9 (Medium);
Sana: 10-iyun, 2025
▪️ 2. Arbitrary File Deletion (CVE-2025-4799)
Zaiflik darajasi: 7.2 (High);
Sana: 10-iyun, 2025
@TuranSecurity | www.turansec.uz |
🔥50👍9👨💻4❤1
Markaziy Osiyo kiberxavfsizlik tarixida yangi bosqich
Turan Security kompaniyasi rasmiy ravishda CVE Numbering Authority (CNA) maqomini oldi.
Bu degani, Turan Security endi aniqlangan xavfsizlik zaifliklari uchun CVE identifikatorlarini berish vakolatiga ega bo‘ldi va shu orqali Markaziy Osiyodagi birinchi CNA tashkilotiga aylandi.
CVE (Common Vulnerabilities and Exposures) — butun dunyo bo‘yicha xavfsizlik zaifliklarini yagona identifikatsiya qilish tizimi bo‘lib, unga qo‘shilish katta ishonch va mas’uliyatni anglatadi.
Endilikda Turan Security:
- yangi zaifliklarni aniqlaydi
- ularni tekshiradi
- va ularga rasmiy CVE ID biriktiradi
Shu orqali global vulnerability disclosure jarayoniga o‘z hissasini qo‘shadi.
Bu natija jamoamizning professional mehnati va Markaziy Osiyoda kiberxavfsizlikni rivojlantirish yo‘lidagi sa’y-harakatlarining natijasidir.
Batafsil
https://cve.org/Media/News/item/news/2026/03/03/Turan-Security-Added-as-CNA
CNA sahifamiz
https://cve.turansec.uz
Markaziy Osiyodagi birinchi CNA bo‘lish — bu nafaqat yutuq, balki katta mas’uliyat hamdir.
Biz kiberxavfsizlik tadqiqotlari, mas’uliyatli zaifliklarni oshkor qilish va xalqaro hamkorlikni rivojlantirishda faol ishlashda davom etamiz.
Safarimiz davom etadi.
EN:
A new chapter in the history of cybersecurity in Central Asia
Turan Security company has officially obtained the status of CVE Numbering Authority (CNA).
This means that Turan Security now has the authority to assign CVE identifiers for discovered security vulnerabilities and has thus become the first CNA organization in Central Asia.
CVE (Common Vulnerabilities and Exposures) is a global system for uniquely identifying security vulnerabilities, and joining it represents great trust and responsibility.
From now on, Turan Security will:
- identify new vulnerabilities
- verify them
- and assign official CVE IDs
In doing so, it contributes to the global vulnerability disclosure process.
This achievement is the result of our team's professional work and efforts to develop cybersecurity in Central Asia.
More details
https://cve.org/Media/News/item/news/2026/03/03/Turan-Security-Added-as-CNA
Our CNA page
https://cve.turansec.uz
Being the first CNA in Central Asia is not only an achievement but also a great responsibility.
We will continue to actively work on cybersecurity research, responsible vulnerability disclosure, and the development of international cooperation.
Our journey continues.
#CyberSecurity #CVE #Infosec #TuranSecurity #CentralAsia
@turansecurity | www.turansec.uz | info@turansec.uz
Turan Security kompaniyasi rasmiy ravishda CVE Numbering Authority (CNA) maqomini oldi.
Bu degani, Turan Security endi aniqlangan xavfsizlik zaifliklari uchun CVE identifikatorlarini berish vakolatiga ega bo‘ldi va shu orqali Markaziy Osiyodagi birinchi CNA tashkilotiga aylandi.
CVE (Common Vulnerabilities and Exposures) — butun dunyo bo‘yicha xavfsizlik zaifliklarini yagona identifikatsiya qilish tizimi bo‘lib, unga qo‘shilish katta ishonch va mas’uliyatni anglatadi.
Endilikda Turan Security:
- yangi zaifliklarni aniqlaydi
- ularni tekshiradi
- va ularga rasmiy CVE ID biriktiradi
Shu orqali global vulnerability disclosure jarayoniga o‘z hissasini qo‘shadi.
Bu natija jamoamizning professional mehnati va Markaziy Osiyoda kiberxavfsizlikni rivojlantirish yo‘lidagi sa’y-harakatlarining natijasidir.
Batafsil
https://cve.org/Media/News/item/news/2026/03/03/Turan-Security-Added-as-CNA
CNA sahifamiz
https://cve.turansec.uz
Markaziy Osiyodagi birinchi CNA bo‘lish — bu nafaqat yutuq, balki katta mas’uliyat hamdir.
Biz kiberxavfsizlik tadqiqotlari, mas’uliyatli zaifliklarni oshkor qilish va xalqaro hamkorlikni rivojlantirishda faol ishlashda davom etamiz.
Safarimiz davom etadi.
EN:
A new chapter in the history of cybersecurity in Central Asia
Turan Security company has officially obtained the status of CVE Numbering Authority (CNA).
This means that Turan Security now has the authority to assign CVE identifiers for discovered security vulnerabilities and has thus become the first CNA organization in Central Asia.
CVE (Common Vulnerabilities and Exposures) is a global system for uniquely identifying security vulnerabilities, and joining it represents great trust and responsibility.
From now on, Turan Security will:
- identify new vulnerabilities
- verify them
- and assign official CVE IDs
In doing so, it contributes to the global vulnerability disclosure process.
This achievement is the result of our team's professional work and efforts to develop cybersecurity in Central Asia.
More details
https://cve.org/Media/News/item/news/2026/03/03/Turan-Security-Added-as-CNA
Our CNA page
https://cve.turansec.uz
Being the first CNA in Central Asia is not only an achievement but also a great responsibility.
We will continue to actively work on cybersecurity research, responsible vulnerability disclosure, and the development of international cooperation.
Our journey continues.
#CyberSecurity #CVE #Infosec #TuranSecurity #CentralAsia
@turansecurity | www.turansec.uz | info@turansec.uz
🔥67