Sun, 25 Oct 2026 02:30:09 +0100 Sun, 25 Oct 2026 02:30:09 +0100 15 2026 tsecurity.de - Reverse Engineering contact@tsecurity.de (tsecurity.de) contact@tsecurity.de (tsecurity.de) https://tsecurity.de/templates/mydraft-basis-tsecurity.de/media/logo.png https://tsecurity.de/de/4295224/sicherheitsluecken-cve/cve-2026-115969-travisun-opptrix-040-schedule-api-apiauthsetup-command-injection-euvd-2026-109306/ https://tsecurity.de/de/4295224/sicherheitsluecken-cve/cve-2026-115969-travisun-opptrix-040-schedule-api-apiauthsetup-command-injection-euvd-2026-109306/ Sun, 25 Oct 2026 00:09:07 +0200 A vulnerability, which was classified as critical, has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command injection. This vulnerability only affects products that are no longer supported by the maintainer. The identification of this... Weiterlesen

]]> https://tsecurity.de/de/4295223/sicherheitsluecken-cve/cve-2026-112855-axiomthemes-redy-plugin-up-to-135-on-wordpress-deserialization-euvd-2026-108943/ https://tsecurity.de/de/4295223/sicherheitsluecken-cve/cve-2026-112855-axiomthemes-redy-plugin-up-to-135-on-wordpress-deserialization-euvd-2026-108943/ Sun, 25 Oct 2026 00:09:07 +0200 A vulnerability was found in axiomthemes Redy Plugin up to 1.3.5 on WordPress and classified as critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to deserialization. This vulnerability is registered as CVE-2026-112855. It is possible to launch the attack remotely. No exploit is available. Weiterlesen

]]> https://tsecurity.de/de/4295222/sicherheitsluecken-cve/cve-2026-112851-merex-group-hotlock-plugin-up-to-139-on-wordpress-deserialization-euvd-2026-108950/ https://tsecurity.de/de/4295222/sicherheitsluecken-cve/cve-2026-112851-merex-group-hotlock-plugin-up-to-139-on-wordpress-deserialization-euvd-2026-108950/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability classified as critical was found in meREX Group HotLock Plugin up to 1.3.9 on WordPress. This affects an unknown function. The manipulation results in deserialization. This vulnerability is identified as CVE-2026-112851. The attack can be executed remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295221/sicherheitsluecken-cve/cve-2026-112846-merex-group-save-life-plugin-up-to-1214-on-wordpress-deserialization-euvd-2026-108951/ https://tsecurity.de/de/4295221/sicherheitsluecken-cve/cve-2026-112846-merex-group-save-life-plugin-up-to-1214-on-wordpress-deserialization-euvd-2026-108951/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability labeled as critical has been found in meREX Group Save Life Plugin up to 1.2.14 on WordPress. This issue affects some unknown processing. Such manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2026-112846. The attack can be launched remotely. No exploit exists. Weiterlesen

]]> https://tsecurity.de/de/4295220/sicherheitsluecken-cve/cve-2026-112858-axiomthemes-rhodos-plugin-up-to-133-on-wordpress-deserialization-euvd-2026-108945/ https://tsecurity.de/de/4295220/sicherheitsluecken-cve/cve-2026-112858-axiomthemes-rhodos-plugin-up-to-133-on-wordpress-deserialization-euvd-2026-108945/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability was found in axiomthemes Rhodos Plugin up to 1.3.3 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation results in deserialization. This vulnerability is reported as CVE-2026-112858. The attack can be launched remotely. No exploit exists. Weiterlesen

]]> https://tsecurity.de/de/4295219/sicherheitsluecken-cve/cve-2026-112856-merex-group-vagabonds-plugin-up-to-1310-on-wordpress-deserialization-euvd-2026-108947/ https://tsecurity.de/de/4295219/sicherheitsluecken-cve/cve-2026-112856-merex-group-vagabonds-plugin-up-to-1310-on-wordpress-deserialization-euvd-2026-108947/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability was found in meREX Group Vagabonds Plugin up to 1.3.10 on WordPress. It has been classified as critical. This affects an unknown part. The manipulation leads to deserialization. This vulnerability is documented as CVE-2026-112856. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295218/sicherheitsluecken-cve/cve-2026-112852-merex-group-helion-plugin-up-to-1112-on-wordpress-deserialization-euvd-2026-108949/ https://tsecurity.de/de/4295218/sicherheitsluecken-cve/cve-2026-112852-merex-group-helion-plugin-up-to-1112-on-wordpress-deserialization-euvd-2026-108949/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability, which was classified as critical, has been found in meREX Group Helion Plugin up to 1.1.12 on WordPress. This impacts an unknown function. This manipulation causes deserialization. This vulnerability is tracked as CVE-2026-112852. The attack is possible to be carried out remotely. No exploit exists. Weiterlesen

]]> https://tsecurity.de/de/4295217/sicherheitsluecken-cve/cve-2026-111402-tribulant-newsletters-plugin-up-to-4181-on-wordpress-sql-injection-euvd-2026-109247/ https://tsecurity.de/de/4295217/sicherheitsluecken-cve/cve-2026-111402-tribulant-newsletters-plugin-up-to-4181-on-wordpress-sql-injection-euvd-2026-109247/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability was found in Tribulant Newsletters Plugin up to 4.18.1 on WordPress. It has been classified as critical. The impacted element is an unknown function. Performing a manipulation results in sql injection. This vulnerability is identified as CVE-2026-111402. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295216/sicherheitsluecken-cve/cve-2026-112859-merex-group-little-birdies-plugin-up-to-1316-on-wordpress-deserialization-euvd-2026-108944/ https://tsecurity.de/de/4295216/sicherheitsluecken-cve/cve-2026-112859-merex-group-little-birdies-plugin-up-to-1316-on-wordpress-deserialization-euvd-2026-108944/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability categorized as critical has been discovered in meREX Group Little Birdies Plugin up to 1.3.16 on WordPress. Impacted is an unknown function. Such manipulation leads to deserialization. This vulnerability is traded as CVE-2026-112859. The attack may be launched remotely. There is no exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295215/sicherheitsluecken-cve/cve-2026-112848-aivahmes-hostme-plugin-up-to-70-on-wordpress-deserialization-euvd-2026-108956/ https://tsecurity.de/de/4295215/sicherheitsluecken-cve/cve-2026-112848-aivahmes-hostme-plugin-up-to-70-on-wordpress-deserialization-euvd-2026-108956/ Sun, 25 Oct 2026 00:09:06 +0200 A vulnerability identified as critical has been detected in Aivahmes Hostme Plugin up to 7.0 on WordPress. This vulnerability affects unknown code. This manipulation causes deserialization. This vulnerability is handled as CVE-2026-112848. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295214/sicherheitsluecken-cve/cve-2023-29535-mozilla-firefox-up-to-111-garbage-collector-memory-corruption-bug-1820543-euvd-2023-33077/ https://tsecurity.de/de/4295214/sicherheitsluecken-cve/cve-2023-29535-mozilla-firefox-up-to-111-garbage-collector-memory-corruption-bug-1820543-euvd-2023-33077/ Sun, 25 Oct 2026 00:09:05 +0200 A vulnerability classified as critical was found in Mozilla Firefox up to 111. This issue affects some unknown processing of the component Garbage Collector. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2023-29535. The attack may be performed from remote. There is no available exploit. Upgrading the... Weiterlesen

]]> https://tsecurity.de/de/4295213/sicherheitsluecken-cve/cve-2023-28164-mozilla-firefox-up-to-110-url-bug-1809122-euvd-2023-31872/ https://tsecurity.de/de/4295213/sicherheitsluecken-cve/cve-2023-28164-mozilla-firefox-up-to-110-url-bug-1809122-euvd-2023-31872/ Sun, 25 Oct 2026 00:09:04 +0200 A vulnerability labeled as problematic has been found in Mozilla Firefox up to 110. This affects an unknown function of the component URL Handler. Executing a manipulation can lead to an unknown weakness. This vulnerability is registered as CVE-2023-28164. It is possible to launch the attack remotely. No exploit is available. The affected... Weiterlesen

]]> https://tsecurity.de/de/4295212/sicherheitsluecken-cve/cve-2023-28176-mozilla-thunderbird-up-to-1028-memory-corruption-euvd-2023-31884-nessus-id-239802/ https://tsecurity.de/de/4295212/sicherheitsluecken-cve/cve-2023-28176-mozilla-thunderbird-up-to-1028-memory-corruption-euvd-2023-31884-nessus-id-239802/ Sun, 25 Oct 2026 00:09:04 +0200 A vulnerability categorized as critical has been discovered in Mozilla Thunderbird up to 102.8. This impacts an unknown function. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2023-28176. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component. Weiterlesen

]]> https://tsecurity.de/de/4295211/sicherheitsluecken-cve/cve-2023-28163-mozilla-thunderbird-up-to-1028-on-windows-save-as-dialog-remote-code-execution-bug-1817768-euvd-2023-31871/ https://tsecurity.de/de/4295211/sicherheitsluecken-cve/cve-2023-28163-mozilla-thunderbird-up-to-1028-on-windows-save-as-dialog-remote-code-execution-bug-1817768-euvd-2023-31871/ Sun, 25 Oct 2026 00:09:04 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.8 on Windows. It has been rated as critical. This affects an unknown function of the component Save As Dialog Handler. Performing a manipulation results in Remote Code Execution. This vulnerability is identified as CVE-2023-28163. The attack can be initiated remotely. There is not any... Weiterlesen

]]> https://tsecurity.de/de/4295210/sicherheitsluecken-cve/cve-2023-25752-mozilla-thunderbird-up-to-1028-throttled-stream-memory-corruption-bug-1811627-euvd-2023-29659/ https://tsecurity.de/de/4295210/sicherheitsluecken-cve/cve-2023-25752-mozilla-thunderbird-up-to-1028-throttled-stream-memory-corruption-bug-1811627-euvd-2023-29659/ Sun, 25 Oct 2026 00:09:04 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.8. It has been declared as critical. The impacted element is an unknown function of the component Throttled Stream Handler. Such manipulation leads to memory corruption. This vulnerability is referenced as CVE-2023-25752. It is possible to launch the attack remotely. No exploit is... Weiterlesen

]]> https://tsecurity.de/de/4295209/sicherheitsluecken-cve/cve-2023-28162-mozilla-thunderbird-up-to-1028-audioworklet-denial-of-service-bug-1811327-euvd-2023-31870/ https://tsecurity.de/de/4295209/sicherheitsluecken-cve/cve-2023-28162-mozilla-thunderbird-up-to-1028-audioworklet-denial-of-service-bug-1811327-euvd-2023-31870/ Sun, 25 Oct 2026 00:09:04 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.8. It has been classified as problematic. The affected element is an unknown function of the component AudioWorklet Handler. This manipulation causes denial of service. The identification of this vulnerability is CVE-2023-28162. It is possible to initiate the attack remotely. There is no... Weiterlesen

]]> https://tsecurity.de/de/4295208/sicherheitsluecken-cve/cve-2023-25751-mozilla-thunderbird-up-to-1028-jit-code-denial-of-service-bug-1814899-euvd-2023-29658/ https://tsecurity.de/de/4295208/sicherheitsluecken-cve/cve-2023-25751-mozilla-thunderbird-up-to-1028-jit-code-denial-of-service-bug-1814899-euvd-2023-29658/ Sun, 25 Oct 2026 00:09:04 +0200 A vulnerability has been found in Mozilla Thunderbird up to 102.8 and classified as problematic. This issue affects some unknown processing of the component JIT Code Handler. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2023-25751. The attack is possible to be carried out remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4295207/sicherheitsluecken-cve/cve-2023-28164-mozilla-thunderbird-up-to-1028-url-bug-1809122-euvd-2023-31872/ https://tsecurity.de/de/4295207/sicherheitsluecken-cve/cve-2023-28164-mozilla-thunderbird-up-to-1028-url-bug-1809122-euvd-2023-31872/ Sun, 25 Oct 2026 00:09:03 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.8 and classified as problematic. Impacted is an unknown function of the component URL Handler. The manipulation results in an unknown weakness. This vulnerability was named CVE-2023-28164. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade... Weiterlesen

]]> https://tsecurity.de/de/4295206/sicherheitsluecken-cve/cve-2023-28163-mozilla-firefox-up-to-110-save-as-dialog-remote-code-execution-bug-1817768-euvd-2023-31871/ https://tsecurity.de/de/4295206/sicherheitsluecken-cve/cve-2023-28163-mozilla-firefox-up-to-110-save-as-dialog-remote-code-execution-bug-1817768-euvd-2023-31871/ Sun, 25 Oct 2026 00:09:02 +0200 A vulnerability classified as critical was found in Mozilla Firefox up to 110. Affected by this issue is some unknown functionality of the component Save As Dialog Handler. Such manipulation leads to Remote Code Execution. This vulnerability is traded as CVE-2023-28163. The attack may be launched remotely. There is no exploit available. Upgrading... Weiterlesen

]]> https://tsecurity.de/de/4295205/sicherheitsluecken-cve/cve-2023-28176-mozilla-firefox-up-to-110-memory-corruption-euvd-2023-31884-nessus-id-239802/ https://tsecurity.de/de/4295205/sicherheitsluecken-cve/cve-2023-28176-mozilla-firefox-up-to-110-memory-corruption-euvd-2023-31884-nessus-id-239802/ Sun, 25 Oct 2026 00:09:02 +0200 A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 110. This affects an unknown part. Performing a manipulation results in memory corruption. This vulnerability is known as CVE-2023-28176. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected... Weiterlesen

]]> https://tsecurity.de/de/4295204/sicherheitsluecken-cve/cve-2023-28162-mozilla-firefox-up-to-110-audioworklet-denial-of-service-bug-1811327-euvd-2023-31870/ https://tsecurity.de/de/4295204/sicherheitsluecken-cve/cve-2023-28162-mozilla-firefox-up-to-110-audioworklet-denial-of-service-bug-1811327-euvd-2023-31870/ Sun, 25 Oct 2026 00:09:02 +0200 A vulnerability described as problematic has been identified in Mozilla Firefox up to 110. Affected is an unknown function of the component AudioWorklet Handler. The manipulation results in denial of service. This vulnerability is reported as CVE-2023-28162. The attack can be launched remotely. No exploit exists. Upgrading the affected component... Weiterlesen

]]> https://tsecurity.de/de/4295203/sicherheitsluecken-cve/cve-2023-25752-mozilla-firefox-up-to-110-throttled-stream-memory-corruption-bug-1811627-euvd-2023-29659/ https://tsecurity.de/de/4295203/sicherheitsluecken-cve/cve-2023-25752-mozilla-firefox-up-to-110-throttled-stream-memory-corruption-bug-1811627-euvd-2023-29659/ Sun, 25 Oct 2026 00:09:02 +0200 A vulnerability classified as critical has been found in Mozilla Firefox up to 110. Affected by this vulnerability is an unknown functionality of the component Throttled Stream Handler. This manipulation causes memory corruption. This vulnerability appears as CVE-2023-25752. The attack may be initiated remotely. There is no available exploit. It... Weiterlesen

]]> https://tsecurity.de/de/4295202/sicherheitsluecken-cve/cve-2023-29539-mozilla-thunderbird-up-to-1029-content-disposition-header-null-pointer-dereference-bug-1784348-euvd-2023-33081/ https://tsecurity.de/de/4295202/sicherheitsluecken-cve/cve-2023-29539-mozilla-thunderbird-up-to-1029-content-disposition-header-null-pointer-dereference-bug-1784348-euvd-2023-33081/ Sun, 25 Oct 2026 00:09:02 +0200 A vulnerability labeled as critical has been found in Mozilla Thunderbird up to 102.9. The affected element is an unknown function of the component Content-Disposition Header Handler. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2023-29539. The attack can be launched remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4295201/sicherheitsluecken-cve/cve-2023-29535-mozilla-thunderbird-up-to-1029-garbage-collector-memory-corruption-bug-1820543-euvd-2023-33077/ https://tsecurity.de/de/4295201/sicherheitsluecken-cve/cve-2023-29535-mozilla-thunderbird-up-to-1029-garbage-collector-memory-corruption-bug-1820543-euvd-2023-33077/ Sun, 25 Oct 2026 00:09:02 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.9. It has been declared as critical. This affects an unknown part of the component Garbage Collector. The manipulation results in memory corruption. This vulnerability was named CVE-2023-29535. The attack may be performed from remote. There is no available exploit. It is recommended to... Weiterlesen

]]> https://tsecurity.de/de/4295200/sicherheitsluecken-cve/cve-2023-29536-mozilla-thunderbird-up-to-1029-javascript-code-memory-corruption-bug-1821959-euvd-2023-33078/ https://tsecurity.de/de/4295200/sicherheitsluecken-cve/cve-2023-29536-mozilla-thunderbird-up-to-1029-javascript-code-memory-corruption-bug-1821959-euvd-2023-33078/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.9. It has been rated as critical. This vulnerability affects unknown code of the component Javascript Code Handler. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2023-29536. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

]]> https://tsecurity.de/de/4295199/sicherheitsluecken-cve/cve-2023-29536-mozilla-firefox-up-to-111-javascript-code-memory-corruption-bug-1821959-euvd-2023-33078/ https://tsecurity.de/de/4295199/sicherheitsluecken-cve/cve-2023-29536-mozilla-firefox-up-to-111-javascript-code-memory-corruption-bug-1821959-euvd-2023-33078/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 111. Impacted is an unknown function of the component Javascript Code Handler. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2023-29536. It is possible to initiate the attack remotely. There is no exploit available. It is... Weiterlesen

]]> https://tsecurity.de/de/4295198/sicherheitsluecken-cve/cve-2023-29539-mozilla-firefox-up-to-111-content-disposition-header-null-pointer-dereference-bug-1784348-euvd-2023-33081/ https://tsecurity.de/de/4295198/sicherheitsluecken-cve/cve-2023-29539-mozilla-firefox-up-to-111-content-disposition-header-null-pointer-dereference-bug-1784348-euvd-2023-33081/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability was found in Mozilla Firefox up to 111 and classified as critical. This affects an unknown function of the component Content-Disposition Header Handler. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2023-29539. The attack can be launched remotely. No exploit exists. It is... Weiterlesen

]]> https://tsecurity.de/de/4295197/sicherheitsluecken-cve/cve-2023-32212-mozilla-firefox-up-to-112-address-bar-clickjacking-bug-1826622-nessus-id-239763/ https://tsecurity.de/de/4295197/sicherheitsluecken-cve/cve-2023-32212-mozilla-firefox-up-to-112-address-bar-clickjacking-bug-1826622-nessus-id-239763/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability has been found in Mozilla Firefox up to 112 and classified as problematic. Affected by this issue is some unknown functionality of the component Address Bar Handler. The manipulation leads to clickjacking. This vulnerability is documented as CVE-2023-32212. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

]]> https://tsecurity.de/de/4295196/sicherheitsluecken-cve/cve-2023-32207-mozilla-firefox-up-to-112-popup-notification-permission-bug-1826116-nessus-id-239763/ https://tsecurity.de/de/4295196/sicherheitsluecken-cve/cve-2023-32207-mozilla-firefox-up-to-112-popup-notification-permission-bug-1826116-nessus-id-239763/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability described as problematic has been identified in Mozilla Firefox up to 112. The impacted element is an unknown function of the component Popup Notification Handler. The manipulation results in permission issues. This vulnerability is identified as CVE-2023-32207. The attack can be executed remotely. There is not any exploit... Weiterlesen

]]> https://tsecurity.de/de/4295195/sicherheitsluecken-cve/cve-2023-2187-triangle-microworks-scada-data-gateway-up-to-50103-webmonitor-missing-authentication/ https://tsecurity.de/de/4295195/sicherheitsluecken-cve/cve-2023-2187-triangle-microworks-scada-data-gateway-up-to-50103-webmonitor-missing-authentication/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability classified as critical has been found in Triangle MicroWorks SCADA Data Gateway up to 5.01.03. Affected is an unknown function of the component WebMonitor. The manipulation leads to missing authentication. This vulnerability is traded as CVE-2023-2187. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295194/sicherheitsluecken-cve/cve-2023-2186-triangle-microworks-scada-data-gateway-up-to-50103-broadcast-message-gtwwebmonitorexe-format-string/ https://tsecurity.de/de/4295194/sicherheitsluecken-cve/cve-2023-2186-triangle-microworks-scada-data-gateway-up-to-50103-broadcast-message-gtwwebmonitorexe-format-string/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability described as critical has been identified in Triangle MicroWorks SCADA Data Gateway up to 5.01.03. This impacts an unknown function of the file GTWWebMonitor.exe of the component Broadcast Message Handler. Executing a manipulation can lead to format string. This vulnerability appears as CVE-2023-2186. The attack may be performed... Weiterlesen

]]> https://tsecurity.de/de/4295193/sicherheitsluecken-cve/cve-2023-33524-advent-tamale-rms-up-to-230-configuration-backup-file-path-traversal-euvd-2023-37683/ https://tsecurity.de/de/4295193/sicherheitsluecken-cve/cve-2023-33524-advent-tamale-rms-up-to-230-configuration-backup-file-path-traversal-euvd-2023-37683/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability identified as critical has been detected in Advent Tamale RMS up to 23.0. Affected by this issue is some unknown functionality of the component Configuration Backup File Handler. Performing a manipulation results in path traversal. This vulnerability is known as CVE-2023-33524. Remote exploitation of the attack is possible. No... Weiterlesen

]]> https://tsecurity.de/de/4295192/sicherheitsluecken-cve/cve-2023-32207-mozilla-thunderbird-up-to-10210-popup-notification-permission-nessus-id-239763/ https://tsecurity.de/de/4295192/sicherheitsluecken-cve/cve-2023-32207-mozilla-thunderbird-up-to-10210-popup-notification-permission-nessus-id-239763/ Sun, 25 Oct 2026 00:09:01 +0200 A vulnerability identified as critical has been detected in Mozilla Thunderbird up to 102.10. This affects an unknown part of the component Popup Notification Handler. This manipulation causes permission issues. This vulnerability is tracked as CVE-2023-32207. The attack is possible to be carried out remotely. No exploit exists. You should upgrade... Weiterlesen

]]> https://tsecurity.de/de/4295191/sicherheitsluecken-cve/cve-2026-90051-linux-kernel-up-to-6185172573-rc2-tcp-tcpsendmsglocked-locking-wid-sec-2026-3444/ https://tsecurity.de/de/4295191/sicherheitsluecken-cve/cve-2026-90051-linux-kernel-up-to-6185172573-rc2-tcp-tcpsendmsglocked-locking-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:58 +0200 A vulnerability has been found in Linux Kernel up to 6.18.51/7.2.5/7.3-rc2 and classified as very critical. This affects the function tcp_sendmsg_locked of the component TCP. The manipulation leads to improper locking. This vulnerability is referenced as CVE-2026-90051. Remote exploitation of the attack is possible. No exploit is available. The... Weiterlesen

]]> https://tsecurity.de/de/4295190/sicherheitsluecken-cve/cve-2026-90052-linux-kernel-dm-integrity-integritysectorchecksum-buffer-overflow-wid-sec-2026-3444/ https://tsecurity.de/de/4295190/sicherheitsluecken-cve/cve-2026-90052-linux-kernel-dm-integrity-integritysectorchecksum-buffer-overflow-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:58 +0200 A vulnerability, which was classified as very critical, has been found in Linux Kernel. The affected element is the function integrity_sector_checksum of the component dm-integrity. Performing a manipulation results in buffer overflow. This vulnerability was named CVE-2026-90052. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

]]> https://tsecurity.de/de/4295189/sicherheitsluecken-cve/cve-2026-90053-linux-kernel-up-to-725-htb-scheduler-netschedschhtbc-htbclassify-infinite-loop-wid-sec-2026-3444/ https://tsecurity.de/de/4295189/sicherheitsluecken-cve/cve-2026-90053-linux-kernel-up-to-725-htb-scheduler-netschedschhtbc-htbclassify-infinite-loop-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:58 +0200 A vulnerability classified as critical was found in Linux Kernel up to 7.2.5. Impacted is the function htb_classify of the file net/sched/sch_htb.c of the component HTB Scheduler. Such manipulation leads to infinite loop. This vulnerability is uniquely identified as CVE-2026-90053. The attack can be launched remotely. No exploit exists. Upgrading... Weiterlesen

]]> https://tsecurity.de/de/4295188/sicherheitsluecken-cve/cve-2026-90054-linux-kernel-up-to-725-tcp-retransmit-tcpretransmitskb-out-of-bounds-wid-sec-2026-3444/ https://tsecurity.de/de/4295188/sicherheitsluecken-cve/cve-2026-90054-linux-kernel-up-to-725-tcp-retransmit-tcpretransmitskb-out-of-bounds-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:55 +0200 A vulnerability was found in Linux Kernel up to 7.2.5 and classified as critical. This impacts the function __tcp_retransmit_skb of the component TCP Retransmit. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-90054. The attack can be executed remotely. There is not any exploit available. It is... Weiterlesen

]]> https://tsecurity.de/de/4295187/sicherheitsluecken-cve/cve-2026-90056-linux-kernel-up-to-725-fec-ptp-fecc-fecptpstop-bufdescex-initialization-wid-sec-2026-3444/ https://tsecurity.de/de/4295187/sicherheitsluecken-cve/cve-2026-90056-linux-kernel-up-to-725-fec-ptp-fecc-fecptpstop-bufdescex-initialization-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:53 +0200 A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2.5. This issue affects the function fec_ptp_stop of the file drivers/net/ethernet/freescale/fec.c of the component FEC PTP. The manipulation of the argument bufdesc_ex results in improper initialization. This vulnerability is reported as CVE-2026-90056. The attack can... Weiterlesen

]]> https://tsecurity.de/de/4295186/sicherheitsluecken-cve/cve-2026-90055-linux-kernel-up-to-725-usbatm-netatmcommonc-vccconnect-cirange-out-of-bounds-wid-sec-2026-3444/ https://tsecurity.de/de/4295186/sicherheitsluecken-cve/cve-2026-90055-linux-kernel-up-to-725-usbatm-netatmcommonc-vccconnect-cirange-out-of-bounds-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:50 +0200 A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.5. The impacted element is the function __vcc_connect of the file net/atm/common.c of the component usbatm. Executing a manipulation of the argument ci_range can lead to out-of-bounds read. The identification of this vulnerability is CVE-2026-90055. The... Weiterlesen

]]> https://tsecurity.de/de/4295185/sicherheitsluecken-cve/cve-2026-90057-linux-kernel-up-to-725-slip-slipreceivebuf-use-after-free-wid-sec-2026-3444/ https://tsecurity.de/de/4295185/sicherheitsluecken-cve/cve-2026-90057-linux-kernel-up-to-725-slip-slipreceivebuf-use-after-free-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:49 +0200 A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. It has been classified as very critical. Affected is the function slip_receive_buf of the component slip. This manipulation causes use after free. This vulnerability is tracked as CVE-2026-90057. The attack is possible to be carried out remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4295184/sicherheitsluecken-cve/cve-2026-90058-linux-kernel-up-to-725-qdisc-netsched-qdiscgetstab-tcastab-infinite-loop-wid-sec-2026-3444/ https://tsecurity.de/de/4295184/sicherheitsluecken-cve/cve-2026-90058-linux-kernel-up-to-725-qdisc-netsched-qdiscgetstab-tcastab-infinite-loop-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:48 +0200 A vulnerability was found in Linux Kernel up to 7.2.5 and classified as problematic. Affected by this issue is the function qdisc_get_stab of the file net/sched of the component Qdisc. Such manipulation of the argument TCA_STAB leads to infinite loop. This vulnerability is referenced as CVE-2026-90058. It is possible to launch the attack remotely.... Weiterlesen

]]> https://tsecurity.de/de/4295183/sicherheitsluecken-cve/cve-2026-90059-linux-kernel-up-to-61851725-stmmac-icmpecho-stack-based-overflow-wid-sec-2026-3444/ https://tsecurity.de/de/4295183/sicherheitsluecken-cve/cve-2026-90059-linux-kernel-up-to-61851725-stmmac-icmpecho-stack-based-overflow-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:48 +0200 A vulnerability identified as critical has been detected in Linux Kernel up to 6.18.51/7.2.5. This vulnerability affects the function icmp_echo of the component stmmac. The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-90059. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

]]> https://tsecurity.de/de/4295182/sicherheitsluecken-cve/cve-2026-90060-linux-kernel-up-to-6118761210961851725-alsa-control-led-layer-sndctllednotify-null-pointer-dereference-wid-sec-2026-3444/ https://tsecurity.de/de/4295182/sicherheitsluecken-cve/cve-2026-90060-linux-kernel-up-to-6118761210961851725-alsa-control-led-layer-sndctllednotify-null-pointer-dereference-wid-sec-2026-3444/ Sun, 25 Oct 2026 00:08:46 +0200 A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.187/6.12.109/6.18.51/7.2.5. Impacted is the function snd_ctl_led_notify of the component ALSA Control LED Layer. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-90060. The attack may be initiated remotely. There is no available... Weiterlesen

]]> https://tsecurity.de/de/4295181/sicherheitsluecken-cve/cve-2023-33124-siemens-teamcenter-visualizationjt2go-cgm-file-memory-corruption-ssa-538795/ https://tsecurity.de/de/4295181/sicherheitsluecken-cve/cve-2023-33124-siemens-teamcenter-visualizationjt2go-cgm-file-memory-corruption-ssa-538795/ Sun, 25 Oct 2026 00:08:46 +0200 A vulnerability, which was classified as critical, was found in Siemens Teamcenter Visualization and JT2Go. This affects an unknown function of the component CGM File Handler. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2023-33124. The attack must be carried out locally. There is no available exploit. You... Weiterlesen

]]> https://tsecurity.de/de/4295180/sicherheitsluecken-cve/cve-2023-28829-siemens-simatic-net-pc-software-obsolete-function-ssa-508677/ https://tsecurity.de/de/4295180/sicherheitsluecken-cve/cve-2023-28829-siemens-simatic-net-pc-software-obsolete-function-ssa-508677/ Sun, 25 Oct 2026 00:08:45 +0200 A vulnerability marked as problematic has been reported in Siemens SIMATIC NET PC Software, SIMATIC NET PC Software, SIMATIC PCS and SIMATIC WinCC. This vulnerability affects unknown code. Performing a manipulation results in use of obsolete function. This vulnerability was named CVE-2023-28829. The attack needs to be approached within the local... Weiterlesen

]]> https://tsecurity.de/de/4295179/sicherheitsluecken-cve/cve-2023-33121-siemens-teamcenter-visualizationjt2go-cgm-file-null-pointer-dereference-ssa-538795/ https://tsecurity.de/de/4295179/sicherheitsluecken-cve/cve-2023-33121-siemens-teamcenter-visualizationjt2go-cgm-file-null-pointer-dereference-ssa-538795/ Sun, 25 Oct 2026 00:08:45 +0200 A vulnerability labeled as problematic has been found in Siemens Teamcenter Visualization and JT2Go. This affects an unknown part of the component CGM File Handler. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2023-33121. Local access is required to approach this attack. No exploit exists.... Weiterlesen

]]> https://tsecurity.de/de/4295178/sicherheitsluecken-cve/cve-2023-29129-siemens-mendix-saml-incomplete-fix-cve-2023-25957-incorrect-implementation-of-authentication-algorithm-ssa-851884/ https://tsecurity.de/de/4295178/sicherheitsluecken-cve/cve-2023-29129-siemens-mendix-saml-incomplete-fix-cve-2023-25957-incorrect-implementation-of-authentication-algorithm-ssa-851884/ Sun, 25 Oct 2026 00:08:45 +0200 A vulnerability classified as critical has been found in Siemens Mendix SAML. This affects an unknown part of the component Incomplete Fix CVE-2023-25957. Performing a manipulation results in incorrect implementation of authentication algorithm. This vulnerability is identified as CVE-2023-29129. The attack can be initiated remotely. There is not... Weiterlesen

]]> https://tsecurity.de/de/4295177/sicherheitsluecken-cve/cve-2023-33122-siemens-jt2goteamcenter-visualization-cgm-file-out-of-bounds-ssa-538795/ https://tsecurity.de/de/4295177/sicherheitsluecken-cve/cve-2023-33122-siemens-jt2goteamcenter-visualization-cgm-file-out-of-bounds-ssa-538795/ Sun, 25 Oct 2026 00:08:45 +0200 A vulnerability classified as problematic was found in Siemens JT2Go and Teamcenter Visualization. This vulnerability affects unknown code of the component CGM File Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2023-33122. The attack is restricted to local execution. No exploit exists.... Weiterlesen

]]> https://tsecurity.de/de/4295176/sicherheitsluecken-cve/cve-2023-27465-siemens-simotion-c240-54-exposure-of-sensitive-information-ssa-482956/ https://tsecurity.de/de/4295176/sicherheitsluecken-cve/cve-2023-27465-siemens-simotion-c240-54-exposure-of-sensitive-information-ssa-482956/ Sun, 25 Oct 2026 00:08:44 +0200 A vulnerability described as problematic has been identified in Siemens SIMOTION C240, SIMOTION D445-2 DP-PN and SIMOTION P320-4 S 5.4. Affected by this issue is some unknown functionality. Such manipulation leads to exposure of sensitive information due to incompatible policies. This vulnerability is referenced as CVE-2023-27465. The attack can... Weiterlesen

]]> https://tsecurity.de/de/4295175/sicherheitsluecken-cve/cve-2006-2073-isc-bind-up-to-932-zone-transfer-tsig-denial-of-service-vu955777-nessus-id-22311/ https://tsecurity.de/de/4295175/sicherheitsluecken-cve/cve-2006-2073-isc-bind-up-to-932-zone-transfer-tsig-denial-of-service-vu955777-nessus-id-22311/ Sun, 25 Oct 2026 00:08:44 +0200 A vulnerability was found in ISC BIND up to 9.3.2 and classified as critical. Affected is an unknown function of the component Zone Transfer Handler. Executing a manipulation of the argument TSIG can lead to denial of service. This vulnerability appears as CVE-2006-2073. The attack may be performed from remote. There is no available exploit. You... Weiterlesen

]]> https://tsecurity.de/de/4295174/sicherheitsluecken-cve/cve-2023-2828-isc-bind-up-to-91913-cache-resource-consumption-fedora-2023-1d526d551c-nessus-id-240012/ https://tsecurity.de/de/4295174/sicherheitsluecken-cve/cve-2023-2828-isc-bind-up-to-91913-cache-resource-consumption-fedora-2023-1d526d551c-nessus-id-240012/ Sun, 25 Oct 2026 00:08:43 +0200 A vulnerability has been found in ISC BIND up to 9.16.41/9.16.41-S1/9.18.15/9.18.15-S1/9.19.13 and classified as critical. This vulnerability affects unknown code of the component Cache Handler. This manipulation causes resource consumption. This vulnerability is handled as CVE-2023-2828. The attack can be initiated remotely. There is not any... Weiterlesen

]]> https://tsecurity.de/de/4295173/sicherheitsluecken-cve/cve-2023-32214-mozilla-firefox-up-to-112-protocol-denial-of-service-bug-1828716/ https://tsecurity.de/de/4295173/sicherheitsluecken-cve/cve-2023-32214-mozilla-firefox-up-to-112-protocol-denial-of-service-bug-1828716/ Sun, 25 Oct 2026 00:08:41 +0200 A vulnerability was found in Mozilla Firefox up to 112. It has been classified as problematic. This vulnerability affects unknown code of the component Protocol Handler. This manipulation causes denial of service. This vulnerability appears as CVE-2023-32214. The attack may be initiated remotely. There is no available exploit. Upgrading the... Weiterlesen

]]> https://tsecurity.de/de/4295172/sicherheitsluecken-cve/cve-2026-114820-oracle-graalvm-enterprise-editiongraalvm-for-jdkjava-se-jsse-privileges-management-euvd-2026-109314/ https://tsecurity.de/de/4295172/sicherheitsluecken-cve/cve-2026-114820-oracle-graalvm-enterprise-editiongraalvm-for-jdkjava-se-jsse-privileges-management-euvd-2026-109314/ Sun, 25 Oct 2026 00:08:40 +0200 A vulnerability, which was classified as critical, was found in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE up to 27.0.1.0.2. Impacted is an unknown function of the component JSSE. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-114820. The attack may be launched remotely. There... Weiterlesen

]]> https://tsecurity.de/de/4295171/sicherheitsluecken-cve/cve-2026-115973-faveosuite-faveo-helpdesk-203-forgotpasswordcontrollerphp-reset-password-recovery-euvd-2026-109313/ https://tsecurity.de/de/4295171/sicherheitsluecken-cve/cve-2026-115973-faveosuite-faveo-helpdesk-203-forgotpasswordcontrollerphp-reset-password-recovery-euvd-2026-109313/ Sun, 25 Oct 2026 00:08:39 +0200 A vulnerability was found in FaveoSuite Faveo Helpdesk 2.0.3. It has been classified as critical. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. This vulnerability is... Weiterlesen

]]> https://tsecurity.de/de/4295170/sicherheitsluecken-cve/cve-2026-115557-psf-python-ssl-certificate-validation-euvd-2026-109299/ https://tsecurity.de/de/4295170/sicherheitsluecken-cve/cve-2026-115557-psf-python-ssl-certificate-validation-euvd-2026-109299/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability classified as problematic was found in PSF Python. This vulnerability affects unknown code of the component ssl. The manipulation results in improper certificate validation. This vulnerability is reported as CVE-2026-115557. The attack can be launched remotely. No exploit exists. Weiterlesen

]]> https://tsecurity.de/de/4295169/sicherheitsluecken-cve/cve-2026-115972-faveosuite-faveo-helpdesk-up-to-203-unauthcontrollerphp-idstatus-authorization-euvd-2026-109312/ https://tsecurity.de/de/4295169/sicherheitsluecken-cve/cve-2026-115972-faveosuite-faveo-helpdesk-up-to-203-unauthcontrollerphp-idstatus-authorization-euvd-2026-109312/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability was found in FaveoSuite Faveo Helpdesk up to 2.0.3 and classified as problematic. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of the... Weiterlesen

]]> https://tsecurity.de/de/4295168/sicherheitsluecken-cve/cve-2026-115971-travisun-opptrix-040-preparsing-handler-apichannelswebhook-bufferconcat-denial-of-service-euvd-2026-109309/ https://tsecurity.de/de/4295168/sicherheitsluecken-cve/cve-2026-115971-travisun-opptrix-040-preparsing-handler-apichannelswebhook-bufferconcat-denial-of-service-euvd-2026-109309/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability has been found in Travisun Opptrix 0.4.0 and classified as problematic. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in denial of service. This vulnerability only affects products that are no longer supported by the maintainer. This... Weiterlesen

]]> https://tsecurity.de/de/4295167/sicherheitsluecken-cve/cve-2026-112850-ancorames-your-dress-plugin-up-to-141-on-wordpress-file-inclusion-euvd-2026-108954/ https://tsecurity.de/de/4295167/sicherheitsluecken-cve/cve-2026-112850-ancorames-your-dress-plugin-up-to-141-on-wordpress-file-inclusion-euvd-2026-108954/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability was found in Ancorames Your Dress Plugin up to 1.4.1 on WordPress and classified as critical. This impacts an unknown function. Such manipulation leads to file inclusion. This vulnerability is documented as CVE-2026-112850. The attack can be executed remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295166/sicherheitsluecken-cve/cve-2026-115970-travisun-opptrix-040-import-endpoint-import-code-injection-euvd-2026-109308/ https://tsecurity.de/de/4295166/sicherheitsluecken-cve/cve-2026-115970-travisun-opptrix-040-import-endpoint-import-code-injection-euvd-2026-109308/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability, which was classified as critical, was found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is... Weiterlesen

]]> https://tsecurity.de/de/4295165/sicherheitsluecken-cve/cve-2026-114191-knit-pay-upi-qr-code-payment-gateway-plugin-up-to-163-on-wordpress-authorization-euvd-2026-109298/ https://tsecurity.de/de/4295165/sicherheitsluecken-cve/cve-2026-114191-knit-pay-upi-qr-code-payment-gateway-plugin-up-to-163-on-wordpress-authorization-euvd-2026-109298/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability was found in Knit Pay UPI QR Code Payment Gateway Plugin up to 1.6.3 on WordPress. It has been declared as problematic. The affected element is an unknown function. Executing a manipulation can lead to missing authorization. The identification of this vulnerability is CVE-2026-114191. The attack may be launched remotely. There is... Weiterlesen

]]> https://tsecurity.de/de/4295164/sicherheitsluecken-cve/cve-2026-112854-axiomthemes-holistic-center-plugin-up-to-126-on-wordpress-deserialization-euvd-2026-108953/ https://tsecurity.de/de/4295164/sicherheitsluecken-cve/cve-2026-112854-axiomthemes-holistic-center-plugin-up-to-126-on-wordpress-deserialization-euvd-2026-108953/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability, which was classified as critical, was found in Axiomthemes Holistic Center Plugin up to 1.2.6 on WordPress. Affected is an unknown function. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2026-112854. The attack may be performed from remote. There is no available exploit. Weiterlesen

]]> https://tsecurity.de/de/4295163/sicherheitsluecken-cve/cve-2026-112847-merex-zensoul-plugin-up-to-113-on-wordpress-deserialization-euvd-2026-108952/ https://tsecurity.de/de/4295163/sicherheitsluecken-cve/cve-2026-112847-merex-zensoul-plugin-up-to-113-on-wordpress-deserialization-euvd-2026-108952/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability marked as critical has been reported in meREX ZenSoul Plugin up to 1.13 on WordPress. Impacted is an unknown function. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-112847. The attack may be initiated remotely. There is no available exploit. Weiterlesen

]]> https://tsecurity.de/de/4295162/sicherheitsluecken-cve/cve-2026-114192-magepeople-wpevently-plugin-up-to-578-on-wordpress-access-control-euvd-2026-109296/ https://tsecurity.de/de/4295162/sicherheitsluecken-cve/cve-2026-114192-magepeople-wpevently-plugin-up-to-578-on-wordpress-access-control-euvd-2026-109296/ Sun, 25 Oct 2026 00:08:37 +0200 A vulnerability categorized as critical has been discovered in Magepeople WpEvently Plugin up to 5.7.8 on WordPress. This affects an unknown function. The manipulation results in improper access controls. This vulnerability is identified as CVE-2026-114192. The attack can be executed remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4295161/sicherheitsluecken-cve/cve-2026-114704-christoph-vielgrader-relevanssi-plugin-up-to-4284-on-wordpress-deserialization-euvd-2026-109297/ https://tsecurity.de/de/4295161/sicherheitsluecken-cve/cve-2026-114704-christoph-vielgrader-relevanssi-plugin-up-to-4284-on-wordpress-deserialization-euvd-2026-109297/ Sun, 25 Oct 2026 00:08:36 +0200 A vulnerability was found in Christoph Vielgrader Relevanssi Plugin up to 4.28.4 on WordPress. It has been rated as problematic. The impacted element is an unknown function. The manipulation leads to deserialization. This vulnerability is referenced as CVE-2026-114704. Remote exploitation of the attack is possible. No exploit is available. Weiterlesen

]]> https://tsecurity.de/de/4295160/sicherheitsluecken-cve/cve-2021-25828-emby-server-prior-46050-get-request-web-cross-site-scripting-issue-3785/ https://tsecurity.de/de/4295160/sicherheitsluecken-cve/cve-2021-25828-emby-server-prior-46050-get-request-web-cross-site-scripting-issue-3785/ Sun, 25 Oct 2026 00:08:36 +0200 A vulnerability classified as problematic was found in Emby Server. Impacted is an unknown function of the file /web of the component GET Request Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2021-25828. The attack can be executed remotely. There is not any exploit available. Upgrading the... Weiterlesen

]]> https://tsecurity.de/de/4295159/sicherheitsluecken-cve/cve-2023-2911-isc-bind-up-to-9164191641-s19181591815-s1-recursive-clients-quota-stack-based-overflow-fedora-2023-1d526d551c/ https://tsecurity.de/de/4295159/sicherheitsluecken-cve/cve-2023-2911-isc-bind-up-to-9164191641-s19181591815-s1-recursive-clients-quota-stack-based-overflow-fedora-2023-1d526d551c/ Sun, 25 Oct 2026 00:08:36 +0200 A vulnerability labeled as critical has been found in ISC BIND up to 9.16.41/9.16.41-S1/9.18.15/9.18.15-S1. Affected is an unknown function of the component Recursive-clients Quota Handler. Such manipulation leads to stack-based buffer overflow. This vulnerability is listed as CVE-2023-2911. The attack may be performed from remote. There is no... Weiterlesen

]]> https://tsecurity.de/de/4295158/sicherheitsluecken-cve/cve-2022-44276-responsive-filemanager-up-to-911x-unrestricted-upload/ https://tsecurity.de/de/4295158/sicherheitsluecken-cve/cve-2022-44276-responsive-filemanager-up-to-911x-unrestricted-upload/ Sun, 25 Oct 2026 00:08:36 +0200 A vulnerability, which was classified as critical, has been found in Responsive Filemanager up to 9.11.x. This impacts an unknown function. Performing a manipulation results in unrestricted upload. This vulnerability is reported as CVE-2022-44276. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the... Weiterlesen

]]> https://tsecurity.de/de/4295157/sicherheitsluecken-cve/cve-2023-2829-isc-bind-up-to-91641-s191815-s1-nsec-record-denial-of-service/ https://tsecurity.de/de/4295157/sicherheitsluecken-cve/cve-2023-2829-isc-bind-up-to-91641-s191815-s1-nsec-record-denial-of-service/ Sun, 25 Oct 2026 00:08:36 +0200 A vulnerability was found in ISC BIND up to 9.16.41-S1/9.18.15-S1. It has been classified as critical. Impacted is an unknown function of the component NSEC Record Handler. Performing a manipulation results in denial of service. This vulnerability was named CVE-2023-2829. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

]]> https://tsecurity.de/de/4295117/sicherheitsluecken-cve/php-kritische-schwachstelle-patches-kommen-angriffe-steigen-rasant/ https://tsecurity.de/de/4295117/sicherheitsluecken-cve/php-kritische-schwachstelle-patches-kommen-angriffe-steigen-rasant/ Sat, 24 Oct 2026 23:52:37 +0200 SINGAPUR / LONDON (IT BOLTWISE) – Eine kritische Sicherheitslücke in PHP sorgt weltweit für Notfall-Updates. Laut Angaben aus der Sicherheitsforschung betrifft die betroffene Programmiersprache rund 70% der Websites. In den ersten Minuten nach der Entdeckung wurden bereits massive Angriffsversuche beobachtet. Parallel fordern Behörden von den USA... Weiterlesen

]]> https://tsecurity.de/de/4295116/sicherheitsluecken-cve/php-sicherheitsluecke-php2shell-ki-beschleunigt-die-entdeckung-und-verschaerft-den-notfall/ https://tsecurity.de/de/4295116/sicherheitsluecken-cve/php-sicherheitsluecke-php2shell-ki-beschleunigt-die-entdeckung-und-verschaerft-den-notfall/ Sat, 24 Oct 2026 23:52:37 +0200 LONDON (IT BOLTWISE) – In PHP wurde eine kritische Sicherheitslücke unter dem Namen php2shell öffentlich gemacht. Forschende identifizierten zwei Schwachstellen (CVE-2026-109618 und CVE-2026-109619), die unter bestimmten Bedingungen Server unter Kontrolle bringen und Daten abziehen können. Die PHP-Foundation stellte bereits Patches bereit, während... Weiterlesen

]]> https://tsecurity.de/de/4295108/sicherheitsluecken-cve/brotli-schwachstelle-in-python-cve-2026-111497-so-pruefst-du-deine-version/ https://tsecurity.de/de/4295108/sicherheitsluecken-cve/brotli-schwachstelle-in-python-cve-2026-111497-so-pruefst-du-deine-version/ Sat, 24 Oct 2026 23:52:00 +0200 Cybersicherheit. Pasquale Pillitteri. 24/10/2026 10 Min. Lesezeit. Cybersicherheit cybersicherheit it-sicherheit brotli python ... Weiterlesen

]]> https://tsecurity.de/de/4295047/sicherheitsluecken-cve/hacker-macht-27-mio-dollar-krypto-initia-blockchain-steht-still-bitcoin-news/ https://tsecurity.de/de/4295047/sicherheitsluecken-cve/hacker-macht-27-mio-dollar-krypto-initia-blockchain-steht-still-bitcoin-news/ Sat, 24 Oct 2026 23:37:07 +0200 Initia hat seine Blockchain und Rollups eingestellt, nachdem ein Hacker eine Schwachstelle in MoveVM ausgenutzt hatte, um Krypto-Token im Wert von ... Weiterlesen

]]> https://tsecurity.de/de/4295039/sicherheitsluecken-cve/pierluigi-paganini-answers-questions-about-the-php2shell-flaws/ https://tsecurity.de/de/4295039/sicherheitsluecken-cve/pierluigi-paganini-answers-questions-about-the-php2shell-flaws/ Sat, 24 Oct 2026 23:35:40 +0200 Pierluigi Paganini answers questions about the PHP2Shell vulnerability, early exploitation, AI-assisted attacks, and the risks to businesses, servers, and personal data. 1. Your latest report reveals that hackers began exploiting the PHP2Shell vulnerability four days before it was publicly disclosed. First, can you explain what PHP is, how widely... Weiterlesen

]]> https://tsecurity.de/de/4295020/sicherheitsluecken-cve/cve-2023-27401-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-ssa-847261/ https://tsecurity.de/de/4295020/sicherheitsluecken-cve/cve-2023-27401-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-ssa-847261/ Sat, 24 Oct 2026 19:33:32 +0200 A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2023-27401. The attack needs to be launched... Weiterlesen

]]> https://tsecurity.de/de/4295019/sicherheitsluecken-cve/cve-2023-27400-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4295019/sicherheitsluecken-cve/cve-2023-27400-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 19:33:26 +0200 A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been classified as critical. Affected is an unknown function of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2023-27400. The attack must be initiated from a local position. There is no... Weiterlesen

]]> https://tsecurity.de/de/4295018/sicherheitsluecken-cve/cve-2023-24996-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4295018/sicherheitsluecken-cve/cve-2023-24996-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 19:33:18 +0200 A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5 and classified as critical. This affects an unknown function of the component SPP File Handler. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2023-24996. It is possible to launch the attack remotely. No exploit is available. It is... Weiterlesen

]]> https://tsecurity.de/de/4295017/sicherheitsluecken-cve/cve-2023-24994-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4295017/sicherheitsluecken-cve/cve-2023-24994-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 19:33:14 +0200 A vulnerability, which was classified as critical, was found in Siemens Tecnomatix Plant Simulation 16.0.5. The affected element is an unknown function of the component SPP File Handler. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2023-24994. The attack may be performed from remote. There is no available... Weiterlesen

]]> https://tsecurity.de/de/4295016/sicherheitsluecken-cve/cve-2023-22974-openemr-up-to-6x-setupphp-path-traversal-euvd-2023-27074/ https://tsecurity.de/de/4295016/sicherheitsluecken-cve/cve-2023-22974-openemr-up-to-6x-setupphp-path-traversal-euvd-2023-27074/ Sat, 24 Oct 2026 19:33:10 +0200 A vulnerability labeled as critical has been found in OpenEMR up to 6.x. This affects an unknown function of the file setup.php. The manipulation results in path traversal. This vulnerability was named CVE-2023-22974. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded. Weiterlesen

]]> https://tsecurity.de/de/4295015/sicherheitsluecken-cve/cve-2023-23919-nodejs-up-to-142121619018140191x-openssl-error-cryptographic-issue-euvd-2023-28001-nessus-id-216256/ https://tsecurity.de/de/4295015/sicherheitsluecken-cve/cve-2023-23919-nodejs-up-to-142121619018140191x-openssl-error-cryptographic-issue-euvd-2023-28001-nessus-id-216256/ Sat, 24 Oct 2026 19:33:10 +0200 A vulnerability labeled as problematic has been found in Node.js up to 14.21.2/16.19.0/18.14.0/19.1.x. The affected element is an unknown function of the component OpenSSL Error Handler. The manipulation results in cryptographic issues. This vulnerability is known as CVE-2023-23919. Access to the local network is required for this attack. No... Weiterlesen

]]> https://tsecurity.de/de/4295014/sicherheitsluecken-cve/cve-2023-27309-siemens-ruggedcom-crossbow-up-to-51-client-query-authorization-ssa-260625/ https://tsecurity.de/de/4295014/sicherheitsluecken-cve/cve-2023-27309-siemens-ruggedcom-crossbow-up-to-51-client-query-authorization-ssa-260625/ Sat, 24 Oct 2026 19:33:09 +0200 A vulnerability classified as problematic was found in Siemens RUGGEDCOM CROSSBOW up to 5.1. Impacted is an unknown function of the component Client Query Handler. Executing a manipulation can lead to missing authorization. The identification of this vulnerability is CVE-2023-27309. The attack may be launched remotely. There is no exploit... Weiterlesen

]]> https://tsecurity.de/de/4295013/sicherheitsluecken-cve/cve-2023-25207-dpdfrance-up-to-612-on-prestashop-dpdfranceajaxphp-sql-injection-euvd-2023-29170/ https://tsecurity.de/de/4295013/sicherheitsluecken-cve/cve-2023-25207-dpdfrance-up-to-612-on-prestashop-dpdfranceajaxphp-sql-injection-euvd-2023-29170/ Sat, 24 Oct 2026 19:33:04 +0200 A vulnerability labeled as critical has been found in dpdfrance up to 6.1.2 on PrestaShop. The affected element is an unknown function of the file dpdfrance/ajax.php. Such manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2023-25207. The attack can be launched remotely. No exploit exists. The affected component... Weiterlesen

]]> https://tsecurity.de/de/4295012/sicherheitsluecken-cve/cve-2023-27530-rack-gem-on-ruby-multipart-mime-parsing-denial-of-service-nessus-id-207797/ https://tsecurity.de/de/4295012/sicherheitsluecken-cve/cve-2023-27530-rack-gem-on-ruby-multipart-mime-parsing-denial-of-service-nessus-id-207797/ Sat, 24 Oct 2026 19:33:00 +0200 A vulnerability, which was classified as problematic, was found in Rack Gem on Ruby. The affected element is an unknown function of the component Multipart MIME Parsing. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2023-27530. The attack can only be initiated within the local network. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4295011/sicherheitsluecken-cve/cve-2023-23080-tenda-cp3cp7it7-pcsit7-lcsit7-prs-command-injection-euvd-2023-27180/ https://tsecurity.de/de/4295011/sicherheitsluecken-cve/cve-2023-23080-tenda-cp3cp7it7-pcsit7-lcsit7-prs-command-injection-euvd-2023-27180/ Sat, 24 Oct 2026 19:33:00 +0200 A vulnerability has been found in Tenda CP3, CP7, IT7-PCS, IT7-LCS and IT7-PRS and classified as critical. The impacted element is an unknown function. This manipulation causes command injection. This vulnerability appears as CVE-2023-23080. The attacker needs to be present on the local network. There is no available exploit. Weiterlesen

]]> https://tsecurity.de/de/4295010/sicherheitsluecken-cve/cve-2023-23917-rocketchat-server-up-to-51x-command-injection-euvd-2023-27999/ https://tsecurity.de/de/4295010/sicherheitsluecken-cve/cve-2023-23917-rocketchat-server-up-to-51x-command-injection-euvd-2023-27999/ Sat, 24 Oct 2026 19:33:00 +0200 A vulnerability labeled as critical has been found in Rocket.Chat Server up to 5.1.x. This impacts an unknown function. Such manipulation leads to command injection. This vulnerability is traded as CVE-2023-23917. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded. Weiterlesen

]]> https://tsecurity.de/de/4295009/sicherheitsluecken-cve/cve-2023-23918-nodejs-up-to-1421216190181401960-permission-euvd-2023-28000-nessus-id-216256/ https://tsecurity.de/de/4295009/sicherheitsluecken-cve/cve-2023-23918-nodejs-up-to-1421216190181401960-permission-euvd-2023-28000-nessus-id-216256/ Sat, 24 Oct 2026 19:33:00 +0200 A vulnerability was found in Node.js up to 14.21.2/16.19.0/18.14.0/19.6.0. It has been classified as critical. This issue affects some unknown processing. Performing a manipulation results in permission issues. This vulnerability is cataloged as CVE-2023-23918. The attack must originate from the local network. There is no exploit available.... Weiterlesen

]]> https://tsecurity.de/de/4295008/sicherheitsluecken-cve/cve-2023-29104-siemens-simatic-cloud-connect-7-20-web-based-management-path-traversal-ssa-555292/ https://tsecurity.de/de/4295008/sicherheitsluecken-cve/cve-2023-29104-siemens-simatic-cloud-connect-7-20-web-based-management-path-traversal-ssa-555292/ Sat, 24 Oct 2026 19:33:00 +0200 A vulnerability was found in Siemens SIMATIC Cloud Connect 7 2.0. It has been classified as critical. This affects an unknown function of the component Web Based Management. The manipulation leads to path traversal. This vulnerability is documented as CVE-2023-29104. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

]]> https://tsecurity.de/de/4295007/sicherheitsluecken-cve/cve-2023-27409-siemens-scalance-lpe9403-up-to-20-ssh-interface-path-traversal-ssa-325383/ https://tsecurity.de/de/4295007/sicherheitsluecken-cve/cve-2023-27409-siemens-scalance-lpe9403-up-to-20-ssh-interface-path-traversal-ssa-325383/ Sat, 24 Oct 2026 19:32:58 +0200 A vulnerability classified as critical was found in Siemens SCALANCE LPE9403 up to 2.0. The affected element is an unknown function of the component SSH Interface. Such manipulation leads to path traversal. This vulnerability is referenced as CVE-2023-27409. The attack can only be performed from a local environment. No exploit is available.... Weiterlesen

]]> https://tsecurity.de/de/4295006/sicherheitsluecken-cve/cve-2023-27406-siemens-tecnomatix-plant-simulation-1605-spp-file-stack-based-overflow-ssa-847261/ https://tsecurity.de/de/4295006/sicherheitsluecken-cve/cve-2023-27406-siemens-tecnomatix-plant-simulation-1605-spp-file-stack-based-overflow-ssa-847261/ Sat, 24 Oct 2026 19:32:57 +0200 A vulnerability described as critical has been identified in Siemens Tecnomatix Plant Simulation 16.0.5. The affected element is an unknown function of the component SPP File Handler. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is handled as CVE-2023-27406. It is possible to launch the attack on the local... Weiterlesen

]]> https://tsecurity.de/de/4295005/sicherheitsluecken-cve/cve-2023-27535-libcurl-up-to-7x-ftp-connection-reuse-authentication-bypass-fedora-2023-7e7414e64d-nessus-id-236679/ https://tsecurity.de/de/4295005/sicherheitsluecken-cve/cve-2023-27535-libcurl-up-to-7x-ftp-connection-reuse-authentication-bypass-fedora-2023-7e7414e64d-nessus-id-236679/ Sat, 24 Oct 2026 19:32:54 +0200 A vulnerability identified as problematic has been detected in libcurl up to 7.x. Affected by this vulnerability is an unknown functionality of the component FTP Connection Reuse Handler. This manipulation causes authentication bypass by primary weakness. This vulnerability appears as CVE-2023-27535. The attacker needs to be present on the local... Weiterlesen

]]> https://tsecurity.de/de/4295004/sicherheitsluecken-cve/cve-2023-27407-siemens-scalance-lpe9403-up-to-20-web-based-management-command-injection-ssa-325383/ https://tsecurity.de/de/4295004/sicherheitsluecken-cve/cve-2023-27407-siemens-scalance-lpe9403-up-to-20-web-based-management-command-injection-ssa-325383/ Sat, 24 Oct 2026 19:32:51 +0200 A vulnerability, which was classified as critical, was found in Siemens SCALANCE LPE9403 up to 2.0. Impacted is an unknown function of the component Web Based Management. Such manipulation leads to command injection. This vulnerability is listed as CVE-2023-27407. The attack may be performed from remote. There is no available exploit. You should... Weiterlesen

]]> https://tsecurity.de/de/4295003/sicherheitsluecken-cve/cve-2023-22691-tips-and-tricks-hq-plugin-up-to-21-on-wordpress-cross-site-request-forgery/ https://tsecurity.de/de/4295003/sicherheitsluecken-cve/cve-2023-22691-tips-and-tricks-hq-plugin-up-to-21-on-wordpress-cross-site-request-forgery/ Sat, 24 Oct 2026 19:32:50 +0200 A vulnerability, which was classified as problematic, has been found in Tips and Tricks HQ Plugin up to 2.1 on WordPress. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. This vulnerability is reported as CVE-2023-22691. The attack is possible to be carried out remotely. No exploit exists. Weiterlesen

]]> https://tsecurity.de/de/4295002/sicherheitsluecken-cve/cve-2023-2017-shopware-up-to-642006500-rc16500-rc4-special-elements-in-template-engine-ghsa-7v2v-9rm4-7m8f/ https://tsecurity.de/de/4295002/sicherheitsluecken-cve/cve-2023-2017-shopware-up-to-642006500-rc16500-rc4-special-elements-in-template-engine-ghsa-7v2v-9rm4-7m8f/ Sat, 24 Oct 2026 19:32:50 +0200 A vulnerability labeled as critical has been found in Shopware up to 6.4.20.0/6.5.0.0-rc1/6.5.0.0-rc4. The affected element is an unknown function. Such manipulation leads to improper neutralization of special elements used in a template engine. This vulnerability is documented as CVE-2023-2017. The attack can be executed remotely. There is not... Weiterlesen

]]> https://tsecurity.de/de/4295001/sicherheitsluecken-cve/cve-2023-29525-xwiki-xwiki-platform-distribution-war-prior-144814103150-rc-1-legacynotificationadministration-since-escape-output-ghsa-jgg7-w2rj-58cj/ https://tsecurity.de/de/4295001/sicherheitsluecken-cve/cve-2023-29525-xwiki-xwiki-platform-distribution-war-prior-144814103150-rc-1-legacynotificationadministration-since-escape-output-ghsa-jgg7-w2rj-58cj/ Sat, 24 Oct 2026 19:32:50 +0200 A vulnerability, which was classified as critical, has been found in XWiki xwiki-platform-distribution-war and xwiki-platform-legacy-events-hibernate-ui. Affected by this vulnerability is an unknown functionality of the file /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration. The manipulation of the argument since leads to... Weiterlesen

]]> https://tsecurity.de/de/4295000/sicherheitsluecken-cve/cve-2023-27464-siemens-mendix-up-to-370410510-forgot-password-response-discrepancy-ssa-699404/ https://tsecurity.de/de/4295000/sicherheitsluecken-cve/cve-2023-27464-siemens-mendix-up-to-370410510-forgot-password-response-discrepancy-ssa-699404/ Sat, 24 Oct 2026 19:32:50 +0200 A vulnerability categorized as problematic has been discovered in Siemens Mendix up to 3.7.0/4.1.0/5.1.0. This vulnerability affects unknown code of the component Forgot Password Handler. The manipulation results in observable response discrepancy. This vulnerability is reported as CVE-2023-27464. The attack can be launched remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4294999/sicherheitsluecken-cve/cve-2023-0430-mozilla-thunderbird-up-to-10270-signature-certificate-validation-euvd-2023-12487/ https://tsecurity.de/de/4294999/sicherheitsluecken-cve/cve-2023-0430-mozilla-thunderbird-up-to-10270-signature-certificate-validation-euvd-2023-12487/ Sat, 24 Oct 2026 19:32:50 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7.0. It has been rated as critical. This affects an unknown function of the component Signature Handler. Performing a manipulation results in improper certificate validation. This vulnerability is identified as CVE-2023-0430. The attack can be initiated remotely. There is not any exploit... Weiterlesen

]]> https://tsecurity.de/de/4294998/sicherheitsluecken-cve/cve-2023-0616-mozilla-thunderbird-up-to-1027-mime-email-denial-of-service-euvd-2023-12651/ https://tsecurity.de/de/4294998/sicherheitsluecken-cve/cve-2023-0616-mozilla-thunderbird-up-to-1027-mime-email-denial-of-service-euvd-2023-12651/ Sat, 24 Oct 2026 19:32:48 +0200 A vulnerability categorized as problematic has been discovered in Mozilla Thunderbird up to 102.7. This impacts an unknown function of the component MIME Email Handler. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-0616. The attack can be launched remotely. No exploit exists. It is advisable to... Weiterlesen

]]> https://tsecurity.de/de/4294997/sicherheitsluecken-cve/cve-2023-29107-siemens-simatic-cloud-connect-7-20-export-endpoint-file-access-ssa-555292/ https://tsecurity.de/de/4294997/sicherheitsluecken-cve/cve-2023-29107-siemens-simatic-cloud-connect-7-20-export-endpoint-file-access-ssa-555292/ Sat, 24 Oct 2026 19:32:48 +0200 A vulnerability has been found in Siemens SIMATIC Cloud Connect 7 2.0 and classified as problematic. The affected element is an unknown function of the component Export Endpoint. Performing a manipulation results in files or directories accessible. This vulnerability is cataloged as CVE-2023-29107. It is possible to initiate the attack remotely.... Weiterlesen

]]> https://tsecurity.de/de/4294996/sicherheitsluecken-cve/cve-2023-22648-suse-rancher-up-to-273-azure-ad-privileges-management-ghsa-vf6j-6739-78m8/ https://tsecurity.de/de/4294996/sicherheitsluecken-cve/cve-2023-22648-suse-rancher-up-to-273-azure-ad-privileges-management-ghsa-vf6j-6739-78m8/ Sat, 24 Oct 2026 19:32:47 +0200 A vulnerability classified as critical has been found in SUSE Rancher up to 2.7.3. The affected element is an unknown function of the component Azure AD Handler. This manipulation causes improper privilege management. This vulnerability is tracked as CVE-2023-22648. The attack is possible to be carried out remotely. No exploit exists. It is... Weiterlesen

]]> https://tsecurity.de/de/4294995/sicherheitsluecken-cve/cve-2023-31208-checkmk-up-to-200p35210p27220b7-restapi-delimiter/ https://tsecurity.de/de/4294995/sicherheitsluecken-cve/cve-2023-31208-checkmk-up-to-200p35210p27220b7-restapi-delimiter/ Sat, 24 Oct 2026 19:32:47 +0200 A vulnerability labeled as critical has been found in Checkmk up to 2.0.0p35/2.1.0p27/2.2.0b7. The affected element is an unknown function of the component RestAPI. Executing a manipulation can lead to improper neutralization of delimiters. This vulnerability is handled as CVE-2023-31208. The attack can be executed remotely. There is not any... Weiterlesen

]]> https://tsecurity.de/de/4294994/sicherheitsluecken-cve/cve-2022-45846-nickys-image-map-pro-plugin-569-on-wordpress-cross-site-request-forgery/ https://tsecurity.de/de/4294994/sicherheitsluecken-cve/cve-2022-45846-nickys-image-map-pro-plugin-569-on-wordpress-cross-site-request-forgery/ Sat, 24 Oct 2026 19:32:46 +0200 A vulnerability was found in Nickys Image Map Pro Plugin 5.6.9 on WordPress. It has been classified as problematic. This affects an unknown part. Performing a manipulation results in cross-site request forgery. This vulnerability is identified as CVE-2022-45846. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

]]> https://tsecurity.de/de/4294993/sicherheitsluecken-cve/cve-2023-28325-rocketchat-up-to-5x-updatemessage-rid-improper-authorization-euvd-2023-32032/ https://tsecurity.de/de/4294993/sicherheitsluecken-cve/cve-2023-28325-rocketchat-up-to-5x-updatemessage-rid-improper-authorization-euvd-2023-32032/ Sat, 24 Oct 2026 19:32:44 +0200 A vulnerability was found in Rocket.Chat up to 5.x and classified as critical. The impacted element is the function updateMessage. Executing a manipulation of the argument rid can lead to improper authorization. This vulnerability is tracked as CVE-2023-28325. The attack is only possible within the local network. No exploit exists. It is suggested... Weiterlesen

]]> https://tsecurity.de/de/4294992/sicherheitsluecken-cve/cve-2023-29128-siemens-simatic-cloud-connect-7-20-web-based-management-filename-path-traversal-ssa-555292/ https://tsecurity.de/de/4294992/sicherheitsluecken-cve/cve-2023-29128-siemens-simatic-cloud-connect-7-20-web-based-management-filename-path-traversal-ssa-555292/ Sat, 24 Oct 2026 19:32:44 +0200 A vulnerability was found in Siemens SIMATIC Cloud Connect 7 2.0. It has been rated as critical. Affected is an unknown function of the component Web Based Management. This manipulation of the argument filename causes path traversal. This vulnerability appears as CVE-2023-29128. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

]]> https://tsecurity.de/de/4294991/sicherheitsluecken-cve/cve-2023-30898-siemens-siveillance-video-2023-event-server-deserialization-ssa-789345/ https://tsecurity.de/de/4294991/sicherheitsluecken-cve/cve-2023-30898-siemens-siveillance-video-2023-event-server-deserialization-ssa-789345/ Sat, 24 Oct 2026 19:32:44 +0200 A vulnerability categorized as very critical has been discovered in Siemens Siveillance Video 2020, Siveillance Video 2021, Siveillance Video 2022 and Siveillance Video 2023. Affected by this vulnerability is an unknown functionality of the component Event Server Component. Such manipulation leads to deserialization. This vulnerability is traded... Weiterlesen

]]> https://tsecurity.de/de/4294990/sicherheitsluecken-cve/cve-2023-25732-mozilla-thunderbird-up-to-1027-encodeinputstream-out-of-bounds-euvd-2023-29639/ https://tsecurity.de/de/4294990/sicherheitsluecken-cve/cve-2023-25732-mozilla-thunderbird-up-to-1027-encodeinputstream-out-of-bounds-euvd-2023-29639/ Sat, 24 Oct 2026 19:32:42 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been declared as problematic. Affected is an unknown function of the component EncodeInputStream. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2023-25732. The attack may be launched remotely. There is no exploit... Weiterlesen

]]> https://tsecurity.de/de/4294989/sicherheitsluecken-cve/cve-2023-25728-mozilla-thunderbird-up-to-1027-ui-layer-euvd-2023-29635-nessus-id-247804/ https://tsecurity.de/de/4294989/sicherheitsluecken-cve/cve-2023-25728-mozilla-thunderbird-up-to-1027-ui-layer-euvd-2023-29635-nessus-id-247804/ Sat, 24 Oct 2026 19:32:40 +0200 A vulnerability, which was classified as problematic, has been found in Mozilla Thunderbird up to 102.7. Impacted is an unknown function. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is traded as CVE-2023-25728. It is possible to initiate the attack remotely. There is no exploit available. It is... Weiterlesen

]]> https://tsecurity.de/de/4294988/sicherheitsluecken-cve/cve-2023-23599-mozilla-firefox-up-to-108-developer-tools-panel-command-injection-bug-1777800-euvd-2023-27699/ https://tsecurity.de/de/4294988/sicherheitsluecken-cve/cve-2023-23599-mozilla-firefox-up-to-108-developer-tools-panel-command-injection-bug-1777800-euvd-2023-27699/ Sat, 24 Oct 2026 19:32:37 +0200 A vulnerability classified as problematic has been found in Mozilla Firefox up to 108. Affected is an unknown function of the component Developer Tools Panel. The manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2023-23599. The attack is possible to be carried out remotely. No exploit exists. It is... Weiterlesen

]]> https://tsecurity.de/de/4294987/sicherheitsluecken-cve/cve-2023-1945-mozilla-thunderbird-up-to-1029-safe-browsing-api-memory-corruption-bug-1777588-euvd-2023-24131/ https://tsecurity.de/de/4294987/sicherheitsluecken-cve/cve-2023-1945-mozilla-thunderbird-up-to-1029-safe-browsing-api-memory-corruption-bug-1777588-euvd-2023-24131/ Sat, 24 Oct 2026 19:32:37 +0200 A vulnerability classified as critical was found in Mozilla Thunderbird up to 102.9. Affected is an unknown function of the component Safe Browsing API. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2023-1945. The attack can be executed remotely. There is not any exploit available. Upgrading the affected... Weiterlesen

]]> https://tsecurity.de/de/4294986/sicherheitsluecken-cve/cve-2023-25730-mozilla-thunderbird-up-to-1027-fullscreen-mode-requestfullscreen-remote-code-execution-euvd-2023-29637/ https://tsecurity.de/de/4294986/sicherheitsluecken-cve/cve-2023-25730-mozilla-thunderbird-up-to-1027-fullscreen-mode-requestfullscreen-remote-code-execution-euvd-2023-29637/ Sat, 24 Oct 2026 19:32:36 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7 and classified as critical. Impacted is the function requestFullscreen of the component Fullscreen Mode. The manipulation results in Remote Code Execution. This vulnerability was named CVE-2023-25730. The attack may be performed from remote. There is no available exploit. It is suggested... Weiterlesen

]]> https://tsecurity.de/de/4294985/sicherheitsluecken-cve/cve-2023-25732-mozilla-firefox-up-to-109-encodeinputstream-out-of-bounds-write-bug-1804564-euvd-2023-29639/ https://tsecurity.de/de/4294985/sicherheitsluecken-cve/cve-2023-25732-mozilla-firefox-up-to-109-encodeinputstream-out-of-bounds-write-bug-1804564-euvd-2023-29639/ Sat, 24 Oct 2026 19:32:34 +0200 A vulnerability was found in Mozilla Firefox up to 109. It has been declared as critical. Affected by this vulnerability is the function EncodeInputStream. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2023-25732. It is possible to launch the attack remotely. No exploit is available. It is recommended to... Weiterlesen

]]> https://tsecurity.de/de/4294984/sicherheitsluecken-cve/cve-2023-25734-mozilla-firefox-up-to-109-url-file-remote-code-execution-bug-1809923-euvd-2023-29641/ https://tsecurity.de/de/4294984/sicherheitsluecken-cve/cve-2023-25734-mozilla-firefox-up-to-109-url-file-remote-code-execution-bug-1809923-euvd-2023-29641/ Sat, 24 Oct 2026 19:32:34 +0200 A vulnerability was found in Mozilla Firefox up to 109. It has been rated as critical. Affected by this issue is some unknown functionality of the component URL File Handler. Performing a manipulation results in Remote Code Execution. This vulnerability is identified as CVE-2023-25734. The attack can be initiated remotely. There is not any exploit... Weiterlesen

]]> https://tsecurity.de/de/4294983/sicherheitsluecken-cve/cve-2023-25730-mozilla-firefox-up-to-109-fullscreen-mode-remote-code-execution-bug-1794622-euvd-2023-29637/ https://tsecurity.de/de/4294983/sicherheitsluecken-cve/cve-2023-25730-mozilla-firefox-up-to-109-fullscreen-mode-remote-code-execution-bug-1794622-euvd-2023-29637/ Sat, 24 Oct 2026 19:32:34 +0200 A vulnerability described as critical has been identified in Mozilla Firefox up to 109. This vulnerability affects unknown code of the component Fullscreen Mode. The manipulation results in Remote Code Execution. This vulnerability is reported as CVE-2023-25730. The attack can be launched remotely. No exploit exists. Upgrading the affected... Weiterlesen

]]> https://tsecurity.de/de/4294982/sicherheitsluecken-cve/cve-2023-0767-mozilla-firefox-up-to-109-nss-memory-corruption-bug-1804640-nessus-id-239916/ https://tsecurity.de/de/4294982/sicherheitsluecken-cve/cve-2023-0767-mozilla-firefox-up-to-109-nss-memory-corruption-bug-1804640-nessus-id-239916/ Sat, 24 Oct 2026 19:32:34 +0200 A vulnerability classified as critical was found in Mozilla Firefox up to 109. Impacted is an unknown function of the component NSS. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2023-0767. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised. Weiterlesen

]]> https://tsecurity.de/de/4294981/sicherheitsluecken-cve/cve-2023-23605-mozilla-firefox-up-to-108-memory-corruption-euvd-2023-27705/ https://tsecurity.de/de/4294981/sicherheitsluecken-cve/cve-2023-23605-mozilla-firefox-up-to-108-memory-corruption-euvd-2023-27705/ Sat, 24 Oct 2026 19:32:34 +0200 A vulnerability was found in Mozilla Firefox up to 108. It has been classified as critical. Impacted is an unknown function. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2023-23605. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended. Weiterlesen

]]> https://tsecurity.de/de/4294980/sicherheitsluecken-cve/cve-2023-25728-mozilla-firefox-up-to-109-information-disclosure-bug-1790345-euvd-2023-29635/ https://tsecurity.de/de/4294980/sicherheitsluecken-cve/cve-2023-25728-mozilla-firefox-up-to-109-information-disclosure-bug-1790345-euvd-2023-29635/ Sat, 24 Oct 2026 19:32:24 +0200 A vulnerability marked as problematic has been reported in Mozilla Firefox up to 109. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2023-25728. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component. Weiterlesen

]]> https://tsecurity.de/de/4294979/sicherheitsluecken-cve/cve-2023-25735-mozilla-firefox-up-to-109-spidermonkey-use-after-free-bug-1810711-euvd-2023-29642/ https://tsecurity.de/de/4294979/sicherheitsluecken-cve/cve-2023-25735-mozilla-firefox-up-to-109-spidermonkey-use-after-free-bug-1810711-euvd-2023-29642/ Sat, 24 Oct 2026 19:32:17 +0200 A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 109. The affected element is an unknown function of the component SpiderMonkey. Performing a manipulation results in use after free. This vulnerability is known as CVE-2023-25735. Remote exploitation of the attack is possible. No exploit is available. It is... Weiterlesen

]]> https://tsecurity.de/de/4294978/sicherheitsluecken-cve/cve-2023-25743-mozilla-firefox-focus-up-to-109-fullscreen-notification-authentication-spoofing-bug-1800203-euvd-2023-29650/ https://tsecurity.de/de/4294978/sicherheitsluecken-cve/cve-2023-25743-mozilla-firefox-focus-up-to-109-fullscreen-notification-authentication-spoofing-bug-1800203-euvd-2023-29650/ Sat, 24 Oct 2026 19:32:16 +0200 A vulnerability classified as critical has been found in Mozilla Firefox Focus up to 109. This issue affects some unknown processing of the component Fullscreen Notification Handler. This manipulation causes authentication bypass by spoofing. This vulnerability appears as CVE-2023-25743. The attack may be initiated remotely. There is no available... Weiterlesen

]]> https://tsecurity.de/de/4294977/sicherheitsluecken-cve/cve-2023-25739-mozilla-thunderbird-up-to-1027-scriptloadcontext-use-after-free-euvd-2023-29646-nessus-id-245197/ https://tsecurity.de/de/4294977/sicherheitsluecken-cve/cve-2023-25739-mozilla-thunderbird-up-to-1027-scriptloadcontext-use-after-free-euvd-2023-29646-nessus-id-245197/ Sat, 24 Oct 2026 19:32:15 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been rated as critical. Affected by this vulnerability is the function ~ScriptLoadContext. The manipulation leads to use after free. This vulnerability is referenced as CVE-2023-25739. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected... Weiterlesen

]]> https://tsecurity.de/de/4294976/sicherheitsluecken-cve/cve-2023-25737-mozilla-thunderbird-up-to-1027-setupstrokegeometry-remote-code-execution-euvd-2023-29644/ https://tsecurity.de/de/4294976/sicherheitsluecken-cve/cve-2023-25737-mozilla-thunderbird-up-to-1027-setupstrokegeometry-remote-code-execution-euvd-2023-29644/ Sat, 24 Oct 2026 19:32:15 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been classified as critical. This impacts an unknown function of the component SetupStrokeGeometry. Performing a manipulation results in Remote Code Execution. This vulnerability was named CVE-2023-25737. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

]]> https://tsecurity.de/de/4294975/sicherheitsluecken-cve/cve-2023-25735-mozilla-thunderbird-up-to-1027-spidermonkey-use-after-free-euvd-2023-29642/ https://tsecurity.de/de/4294975/sicherheitsluecken-cve/cve-2023-25735-mozilla-thunderbird-up-to-1027-spidermonkey-use-after-free-euvd-2023-29642/ Sat, 24 Oct 2026 19:32:14 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7 and classified as critical. This affects an unknown function of the component SpiderMonkey. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2023-25735. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the... Weiterlesen

]]> https://tsecurity.de/de/4294974/sicherheitsluecken-cve/cve-2023-25734-mozilla-thunderbird-up-to-1027-on-windows-url-remote-code-execution-euvd-2023-29641/ https://tsecurity.de/de/4294974/sicherheitsluecken-cve/cve-2023-25734-mozilla-thunderbird-up-to-1027-on-windows-url-remote-code-execution-euvd-2023-29641/ Sat, 24 Oct 2026 19:32:14 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7 on Windows. It has been declared as critical. The impacted element is an unknown function of the component URL Handler. Such manipulation leads to Remote Code Execution. This vulnerability is referenced as CVE-2023-25734. It is possible to launch the attack remotely. No exploit is... Weiterlesen

]]> https://tsecurity.de/de/4294973/sicherheitsluecken-cve/cve-2023-25742-mozilla-firefox-up-to-109-spki-rsa-public-key-denial-of-service-bug-1813424-euvd-2023-29649/ https://tsecurity.de/de/4294973/sicherheitsluecken-cve/cve-2023-25742-mozilla-firefox-up-to-109-spki-rsa-public-key-denial-of-service-bug-1813424-euvd-2023-29649/ Sat, 24 Oct 2026 19:32:14 +0200 A vulnerability classified as problematic has been found in Mozilla Firefox up to 109. The impacted element is an unknown function of the component SPKI RSA Public Key Handler. Performing a manipulation results in denial of service. This vulnerability is reported as CVE-2023-25742. The attack is possible to be carried out remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4294972/sicherheitsluecken-cve/cve-2023-25739-mozilla-firefox-up-to-109-scriptloadcontext-use-after-free-bug-1811939-euvd-2023-29646/ https://tsecurity.de/de/4294972/sicherheitsluecken-cve/cve-2023-25739-mozilla-firefox-up-to-109-scriptloadcontext-use-after-free-bug-1811939-euvd-2023-29646/ Sat, 24 Oct 2026 19:32:14 +0200 A vulnerability was found in Mozilla Firefox up to 109 and classified as critical. This impacts the function mozilla::dom::ScriptLoadContext::~ScriptLoadContext. The manipulation results in use after free. This vulnerability was named CVE-2023-25739. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade... Weiterlesen

]]> https://tsecurity.de/de/4294971/sicherheitsluecken-cve/cve-2023-25737-mozilla-firefox-up-to-109-setupstrokegeometry-remote-code-execution-bug-1811464-euvd-2023-29644/ https://tsecurity.de/de/4294971/sicherheitsluecken-cve/cve-2023-25737-mozilla-firefox-up-to-109-setupstrokegeometry-remote-code-execution-bug-1811464-euvd-2023-29644/ Sat, 24 Oct 2026 19:32:14 +0200 A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 109. The impacted element is the function SVGUtils::SetupStrokeGeometry. Executing a manipulation can lead to Remote Code Execution. This vulnerability is handled as CVE-2023-25737. The attack can be executed remotely. There is not any exploit available. You... Weiterlesen

]]> https://tsecurity.de/de/4294970/sicherheitsluecken-cve/cve-2026-80663-linux-kernel-up-to-714-intel-speed-select-fstat-link-following-nessus-id-371666-wid-sec-2026-3075/ https://tsecurity.de/de/4294970/sicherheitsluecken-cve/cve-2026-80663-linux-kernel-up-to-714-intel-speed-select-fstat-link-following-nessus-id-371666-wid-sec-2026-3075/ Sat, 24 Oct 2026 19:32:12 +0200 A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function fstat of the file tools/power/x86/intel-speed-select of the component intel-speed-select. Executing a manipulation can lead to link following. The identification of this vulnerability is... Weiterlesen

]]> https://tsecurity.de/de/4294969/sicherheitsluecken-cve/cve-2026-78663-go-net-http-internal-http2-x-net-http2-http2-server-flow-control-multiple-operations-on-resource-in-single-operation-context-id-847187-euvd-2026-95427/ https://tsecurity.de/de/4294969/sicherheitsluecken-cve/cve-2026-78663-go-net-http-internal-http2-x-net-http2-http2-server-flow-control-multiple-operations-on-resource-in-single-operation-context-id-847187-euvd-2026-95427/ Sat, 24 Oct 2026 19:32:07 +0200 A vulnerability, which was classified as problematic, was found in Go net http internal http2 x net http2. Affected by this vulnerability is an unknown functionality of the component HTTP2 Server Flow Control. Executing a manipulation can lead to multiple operations on resource in single-operation context. This vulnerability is registered as... Weiterlesen

]]> https://tsecurity.de/de/4294968/sicherheitsluecken-cve/cve-2026-94422-red-hat-xdg-dbus-proxy-up-to-018-message-filtering-privileges-management-nessus-id-371658/ https://tsecurity.de/de/4294968/sicherheitsluecken-cve/cve-2026-94422-red-hat-xdg-dbus-proxy-up-to-018-message-filtering-privileges-management-nessus-id-371658/ Sat, 24 Oct 2026 19:32:07 +0200 A vulnerability, which was classified as very critical, was found in Red Hat xdg-dbus-proxy up to 0.1.8. Affected by this issue is some unknown functionality of the component Message Filtering. Executing a manipulation can lead to improper privilege management. This vulnerability appears as CVE-2026-94422. The attack requires local access. There... Weiterlesen

]]> https://tsecurity.de/de/4294967/sicherheitsluecken-cve/cve-2026-114603-opentelemetry-python-up-to-1450-tracecontexttextmappropagator-spanpy-tracestatefromheader-resource-consumption-nessus-id-371635/ https://tsecurity.de/de/4294967/sicherheitsluecken-cve/cve-2026-114603-opentelemetry-python-up-to-1450-tracecontexttextmappropagator-spanpy-tracestatefromheader-resource-consumption-nessus-id-371635/ Sat, 24 Oct 2026 19:32:06 +0200 A vulnerability labeled as problematic has been found in OpenTelemetry Python up to 1.45.0. Affected by this issue is the function TraceState.from_header of the file opentelemetry/trace/span.py of the component TraceContextTextMapPropagator. The manipulation results in resource consumption. This vulnerability is identified as CVE-2026-114603. The... Weiterlesen

]]> https://tsecurity.de/de/4294939/sicherheitsluecken-cve/cve-2026-31431-pruefen-12-schritte-75-min-2026-shatteredio/ https://tsecurity.de/de/4294939/sicherheitsluecken-cve/cve-2026-31431-pruefen-12-schritte-75-min-2026-shatteredio/ Sat, 24 Oct 2026 19:13:12 +0200 Weitere Grundlagen zu Schwachstellen und Gegenmaßnahmen finden Sie in der Rubrik Cybersicherheit. Der Plan unterteilt sich in zwölf Schritte. Die ... Weiterlesen

]]> https://tsecurity.de/de/4294930/sicherheitsluecken-cve/us-cisa-adds-collabora-online-flaw-to-its-known-exploited-vulnerabilities-catalog/ https://tsecurity.de/de/4294930/sicherheitsluecken-cve/us-cisa-adds-collabora-online-flaw-to-its-known-exploited-vulnerabilities-catalog/ Sat, 24 Oct 2026 19:09:14 +0200 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online – Built-in CODE Server flaw, tracked as CVE-2026-110447 (CVSS score of 9.2), to its Known Exploited... Weiterlesen

]]> https://tsecurity.de/de/4294928/sicherheitsluecken-cve/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/ https://tsecurity.de/de/4294928/sicherheitsluecken-cve/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/ Sat, 24 Oct 2026 19:06:48 +0200 A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast. [...] Weiterlesen

]]> https://tsecurity.de/de/4294841/sicherheitsluecken-cve/that-was-just-the-beginning-ai-expert-gentsch-on-the-php-security-vulnerability-youtube/ https://tsecurity.de/de/4294841/sicherheitsluecken-cve/that-was-just-the-beginning-ai-expert-gentsch-on-the-php-security-vulnerability-youtube/ Sat, 24 Oct 2026 18:52:12 +0200 YouTube Video

]]> https://tsecurity.de/de/4294809/sicherheitsluecken-cve/cve-2023-25392-allegro-tech-bigflow-16-certificate-validation-euvd-2023-1403/ https://tsecurity.de/de/4294809/sicherheitsluecken-cve/cve-2023-25392-allegro-tech-bigflow-16-certificate-validation-euvd-2023-1403/ Sat, 24 Oct 2026 16:23:31 +0200 A vulnerability classified as critical has been found in Allegro Tech BigFlow 1.6. This impacts an unknown function. Performing a manipulation results in improper certificate validation. This vulnerability is cataloged as CVE-2023-25392. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a... Weiterlesen

]]> https://tsecurity.de/de/4294808/sicherheitsluecken-cve/cve-2023-29105-siemens-simatic-cloud-connect-7-20-mqtt-parser-missing-standardized-error-handling-mechanism-ssa-555292/ https://tsecurity.de/de/4294808/sicherheitsluecken-cve/cve-2023-29105-siemens-simatic-cloud-connect-7-20-mqtt-parser-missing-standardized-error-handling-mechanism-ssa-555292/ Sat, 24 Oct 2026 16:23:29 +0200 A vulnerability, which was classified as critical, has been found in Siemens SIMATIC Cloud Connect 7 2.0. The impacted element is an unknown function of the component MQTT Parser. Performing a manipulation results in missing standardized error handling mechanism. This vulnerability is identified as CVE-2023-29105. The attack can be initiated... Weiterlesen

]]> https://tsecurity.de/de/4294807/sicherheitsluecken-cve/cve-2023-30986-siemens-solid-edge-se2023-stp-file-memory-corruption-ssa-932528/ https://tsecurity.de/de/4294807/sicherheitsluecken-cve/cve-2023-30986-siemens-solid-edge-se2023-stp-file-memory-corruption-ssa-932528/ Sat, 24 Oct 2026 16:23:29 +0200 A vulnerability, which was classified as critical, was found in Siemens Solid Edge SE2023. This affects an unknown function of the component STP File Handler. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2023-30986. The attack is restricted to local execution. No exploit exists. It is advisable to... Weiterlesen

]]> https://tsecurity.de/de/4294806/sicherheitsluecken-cve/cve-2022-43767-siemens-simatic-cp-1242-7-v2-webserver-denial-of-service-ssa-566905/ https://tsecurity.de/de/4294806/sicherheitsluecken-cve/cve-2022-43767-siemens-simatic-cp-1242-7-v2-webserver-denial-of-service-ssa-566905/ Sat, 24 Oct 2026 16:23:28 +0200 A vulnerability marked as problematic has been reported in Siemens SIMATIC CP 1242-7 V2, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-7 LTE EU, SIMATIC CP 1243-7 LTE US, SIMATIC CP 1243-8 IRC, SIMATIC CP 1542SP-1, SIMATIC CP 1542SP-1 IRC, SIMATIC CP 1543SP-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC... Weiterlesen

]]> https://tsecurity.de/de/4294805/sicherheitsluecken-cve/cve-2023-27408-siemens-scalance-lpe9403-up-to-20-i2c-mutex-file-temp-file-ssa-325383/ https://tsecurity.de/de/4294805/sicherheitsluecken-cve/cve-2023-27408-siemens-scalance-lpe9403-up-to-20-i2c-mutex-file-temp-file-ssa-325383/ Sat, 24 Oct 2026 16:23:27 +0200 A vulnerability marked as problematic has been reported in Siemens SCALANCE LPE9403 up to 2.0. This vulnerability affects unknown code of the component i2c Mutex File Handler. The manipulation leads to creation of temporary file with insecure permissions. This vulnerability is uniquely identified as CVE-2023-27408. Local access is required to... Weiterlesen

]]> https://tsecurity.de/de/4294804/sicherheitsluecken-cve/cve-2023-30985-siemens-solid-edge-se2023-obj-file-out-of-bounds-ssa-932528/ https://tsecurity.de/de/4294804/sicherheitsluecken-cve/cve-2023-30985-siemens-solid-edge-se2023-obj-file-out-of-bounds-ssa-932528/ Sat, 24 Oct 2026 16:23:26 +0200 A vulnerability labeled as problematic has been found in Siemens Solid Edge SE2023. This affects an unknown part of the component OBJ File Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2023-30985. It is possible to launch the attack on the local host. There is not any exploit available. It... Weiterlesen

]]> https://tsecurity.de/de/4294803/sicherheitsluecken-cve/cve-2023-30899-siemens-siveillance-video-2023-management-server-deserialization-ssa-789345/ https://tsecurity.de/de/4294803/sicherheitsluecken-cve/cve-2023-30899-siemens-siveillance-video-2023-management-server-deserialization-ssa-789345/ Sat, 24 Oct 2026 16:23:26 +0200 A vulnerability identified as very critical has been detected in Siemens Siveillance Video 2020, Siveillance Video 2021, Siveillance Video 2022 and Siveillance Video 2023. Affected by this issue is some unknown functionality of the component Management Server Component. Performing a manipulation results in deserialization. This vulnerability is... Weiterlesen

]]> https://tsecurity.de/de/4294802/sicherheitsluecken-cve/cve-2023-30549-apptainer-prior-118-extfs-denial-of-service-euvd-2023-1328-nessus-id-247109/ https://tsecurity.de/de/4294802/sicherheitsluecken-cve/cve-2023-30549-apptainer-prior-118-extfs-denial-of-service-euvd-2023-1328-nessus-id-247109/ Sat, 24 Oct 2026 16:23:26 +0200 A vulnerability classified as problematic was found in apptainer. Affected by this vulnerability is an unknown functionality of the component extfs Handler. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2023-30549. The attack requires local access. There is no available exploit. Upgrading the affected... Weiterlesen

]]> https://tsecurity.de/de/4294801/sicherheitsluecken-cve/cve-2023-29106-siemens-simatic-cloud-connect-7-20-rest-api-information-disclosure-ssa-555292/ https://tsecurity.de/de/4294801/sicherheitsluecken-cve/cve-2023-29106-siemens-simatic-cloud-connect-7-20-rest-api-information-disclosure-ssa-555292/ Sat, 24 Oct 2026 16:23:26 +0200 A vulnerability was found in Siemens SIMATIC Cloud Connect 7 2.0. It has been declared as problematic. This impacts an unknown function of the component REST API. The manipulation results in information disclosure. This vulnerability is reported as CVE-2023-29106. The attack can be launched remotely. No exploit exists. It is recommended to upgrade... Weiterlesen

]]> https://tsecurity.de/de/4294800/sicherheitsluecken-cve/cve-2022-43768-siemens-simatic-cp-1242-7-v2-webserver-allocation-of-resources-ssa-566905/ https://tsecurity.de/de/4294800/sicherheitsluecken-cve/cve-2022-43768-siemens-simatic-cp-1242-7-v2-webserver-allocation-of-resources-ssa-566905/ Sat, 24 Oct 2026 16:23:25 +0200 A vulnerability described as critical has been identified in Siemens SIMATIC CP 1242-7 V2, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-7 LTE EU, SIMATIC CP 1243-7 LTE US, SIMATIC CP 1243-8 IRC, SIMATIC CP 1542SP-1, SIMATIC CP 1542SP-1 IRC, SIMATIC CP 1543SP-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced,... Weiterlesen

]]> https://tsecurity.de/de/4294799/sicherheitsluecken-cve/cve-2023-29053-siemens-jt-utilities-prior-1132013300-jt-file-out-of-bounds-ssa-642810/ https://tsecurity.de/de/4294799/sicherheitsluecken-cve/cve-2023-29053-siemens-jt-utilities-prior-1132013300-jt-file-out-of-bounds-ssa-642810/ Sat, 24 Oct 2026 16:23:25 +0200 A vulnerability classified as problematic has been found in Siemens JT Utilities. This affects an unknown function of the component JT File Handler. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2023-29053. The attack is possible to be carried out remotely. No exploit exists. It is recommended to... Weiterlesen

]]> https://tsecurity.de/de/4294798/sicherheitsluecken-cve/cve-2023-30191-cdesigner-up-to-318-on-prestashop-initcontent-sql-injection-euvd-2023-34616/ https://tsecurity.de/de/4294798/sicherheitsluecken-cve/cve-2023-30191-cdesigner-up-to-318-on-prestashop-initcontent-sql-injection-euvd-2023-34616/ Sat, 24 Oct 2026 16:23:25 +0200 A vulnerability was found in cdesigner up to 3.1.8 on PrestaShop and classified as critical. The impacted element is the function CdesignerTraitementModuleFrontController::initContent. Executing a manipulation can lead to sql injection. The identification of this vulnerability is CVE-2023-30191. The attack may be launched remotely. There is no... Weiterlesen

]]> https://tsecurity.de/de/4294797/sicherheitsluecken-cve/cve-2023-28321-apple-macos-up-to-1341-curl-certificate-validation-ht213843-euvd-2023-32028/ https://tsecurity.de/de/4294797/sicherheitsluecken-cve/cve-2023-28321-apple-macos-up-to-1341-curl-certificate-validation-ht213843-euvd-2023-32028/ Sat, 24 Oct 2026 16:23:25 +0200 A vulnerability categorized as problematic has been discovered in Apple macOS up to 13.4.1. This vulnerability affects unknown code of the component curl. Executing a manipulation can lead to improper certificate validation. This vulnerability appears as CVE-2023-28321. The attack requires local access. There is no available exploit. It is... Weiterlesen

]]> https://tsecurity.de/de/4294796/sicherheitsluecken-cve/cve-2023-28320-apple-macos-up-to-1341-curl-race-condition-ht213843-euvd-2023-32027/ https://tsecurity.de/de/4294796/sicherheitsluecken-cve/cve-2023-28320-apple-macos-up-to-1341-curl-race-condition-ht213843-euvd-2023-32027/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability was found in Apple macOS up to 13.4.1. It has been rated as problematic. This affects an unknown part of the component curl. Performing a manipulation results in race condition. This vulnerability is reported as CVE-2023-28320. The attack requires a local approach. No exploit exists. Upgrading the affected component is advised. Weiterlesen

]]> https://tsecurity.de/de/4294795/sicherheitsluecken-cve/cve-2023-28319-apple-macos-up-to-1341-curl-use-after-free-ht213843-euvd-2023-32026/ https://tsecurity.de/de/4294795/sicherheitsluecken-cve/cve-2023-28319-apple-macos-up-to-1341-curl-use-after-free-ht213843-euvd-2023-32026/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability was found in Apple macOS up to 13.4.1. It has been declared as problematic. Affected by this issue is some unknown functionality of the component curl. Such manipulation leads to use after free. This vulnerability is documented as CVE-2023-28319. The attack needs to be performed locally. There is not any exploit available. It is... Weiterlesen

]]> https://tsecurity.de/de/4294794/sicherheitsluecken-cve/cve-2022-43760-suse-rancher-up-to-273-cross-site-scripting-ghsa-46v3-ggjg-qq3x/ https://tsecurity.de/de/4294794/sicherheitsluecken-cve/cve-2022-43760-suse-rancher-up-to-273-cross-site-scripting-ghsa-46v3-ggjg-qq3x/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability has been found in SUSE Rancher up to 2.7.3 and classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2022-43760. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded. Weiterlesen

]]> https://tsecurity.de/de/4294793/sicherheitsluecken-cve/cve-2023-22685-tips-and-tricks-hq-ruhul-amin-category-specific-rss-feed-subscription-plugin-cross-site-scripting/ https://tsecurity.de/de/4294793/sicherheitsluecken-cve/cve-2023-22685-tips-and-tricks-hq-ruhul-amin-category-specific-rss-feed-subscription-plugin-cross-site-scripting/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability classified as problematic has been found in Tips and Tricks HQ Ruhul Amin Category Specific RSS Feed Subscription Plugin up to 2.2 on WordPress. This impacts an unknown function. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2023-22685. The attack can be initiated remotely. There is not any... Weiterlesen

]]> https://tsecurity.de/de/4294792/sicherheitsluecken-cve/cve-2023-22647-suse-rancher-up-to-273-privileges-management-ghsa-p976-h52c-26p6/ https://tsecurity.de/de/4294792/sicherheitsluecken-cve/cve-2023-22647-suse-rancher-up-to-273-privileges-management-ghsa-p976-h52c-26p6/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability, which was classified as critical, was found in SUSE Rancher up to 2.7.3. This impacts an unknown function. Executing a manipulation can lead to improper privilege management. This vulnerability is registered as CVE-2023-22647. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected... Weiterlesen

]]> https://tsecurity.de/de/4294791/sicherheitsluecken-cve/cve-2023-31135-dgraph-up-to-22x-audit-log-inadequate-encryption-ghsa-92wq-q9pq-gw47/ https://tsecurity.de/de/4294791/sicherheitsluecken-cve/cve-2023-31135-dgraph-up-to-22x-audit-log-inadequate-encryption-ghsa-92wq-q9pq-gw47/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability classified as problematic has been found in Dgraph up to 22.x. This affects an unknown part of the component Audit log Handler. The manipulation leads to inadequate encryption strength. This vulnerability is traded as CVE-2023-31135. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to... Weiterlesen

]]> https://tsecurity.de/de/4294790/sicherheitsluecken-cve/cve-2023-28320-curl-up-to-801-siglongjmp-race-condition-euvd-2023-32027-nessus-id-215401/ https://tsecurity.de/de/4294790/sicherheitsluecken-cve/cve-2023-28320-curl-up-to-801-siglongjmp-race-condition-euvd-2023-32027-nessus-id-215401/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability, which was classified as problematic, has been found in curl. Affected by this vulnerability is the function siglongjmp. Performing a manipulation results in race condition. This vulnerability is identified as CVE-2023-28320. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the... Weiterlesen

]]> https://tsecurity.de/de/4294789/sicherheitsluecken-cve/cve-2023-28321-curl-up-to-801-idn-wildcard-certificate-validation-fedora-2023-37eac50e9b-euvd-2023-32028/ https://tsecurity.de/de/4294789/sicherheitsluecken-cve/cve-2023-28321-curl-up-to-801-idn-wildcard-certificate-validation-fedora-2023-37eac50e9b-euvd-2023-32028/ Sat, 24 Oct 2026 16:23:24 +0200 A vulnerability classified as critical has been found in curl. This impacts an unknown function of the component IDN Wildcard Handler. This manipulation causes improper certificate validation. The identification of this vulnerability is CVE-2023-28321. It is possible to initiate the attack remotely. There is no exploit available. It is recommended... Weiterlesen

]]> https://tsecurity.de/de/4294788/sicherheitsluecken-cve/cve-2023-28319-curl-up-to-801-ssh-sha256-fingerprint-use-after-free-euvd-2023-32026/ https://tsecurity.de/de/4294788/sicherheitsluecken-cve/cve-2023-28319-curl-up-to-801-ssh-sha256-fingerprint-use-after-free-euvd-2023-32026/ Sat, 24 Oct 2026 16:23:23 +0200 A vulnerability classified as critical was found in curl. Affected is an unknown function of the component SSH SHA256 Fingerprint Handler. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2023-28319. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised. Weiterlesen

]]> https://tsecurity.de/de/4294787/sicherheitsluecken-cve/cve-2023-23598-mozilla-firefox-up-to-108-gtk-wrapper-information-disclosure-bug-1800425-euvd-2023-27698/ https://tsecurity.de/de/4294787/sicherheitsluecken-cve/cve-2023-23598-mozilla-firefox-up-to-108-gtk-wrapper-information-disclosure-bug-1800425-euvd-2023-27698/ Sat, 24 Oct 2026 16:23:23 +0200 A vulnerability described as problematic has been identified in Mozilla Firefox up to 108. This impacts an unknown function of the component GTK Wrapper. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2023-23598. The attack can be executed remotely. There is not any exploit available. Upgrading... Weiterlesen

]]> https://tsecurity.de/de/4294786/sicherheitsluecken-cve/cve-2023-23601-mozilla-thunderbird-up-to-1026-url-cross-domain-policy-euvd-2023-27701-nessus-id-248435/ https://tsecurity.de/de/4294786/sicherheitsluecken-cve/cve-2023-23601-mozilla-thunderbird-up-to-1026-url-cross-domain-policy-euvd-2023-27701-nessus-id-248435/ Sat, 24 Oct 2026 16:23:23 +0200 A vulnerability described as problematic has been identified in Mozilla Thunderbird up to 102.6. This affects an unknown part of the component URL Handler. Such manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is documented as CVE-2023-23601. The attack can be executed remotely. There is not any... Weiterlesen

]]> https://tsecurity.de/de/4294785/sicherheitsluecken-cve/cve-2023-25738-mozilla-thunderbird-up-to-1027-on-windows-printing-out-of-bounds-euvd-2023-29645/ https://tsecurity.de/de/4294785/sicherheitsluecken-cve/cve-2023-25738-mozilla-thunderbird-up-to-1027-on-windows-printing-out-of-bounds-euvd-2023-29645/ Sat, 24 Oct 2026 16:23:23 +0200 A vulnerability was found in Mozilla Thunderbird up to 102.7 on Windows. It has been classified as problematic. The affected element is an unknown function of the component Printing. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2023-25738. It is possible to initiate the attack remotely. There is no... Weiterlesen

]]> https://tsecurity.de/de/4294784/sicherheitsluecken-cve/cve-2023-25746-mozilla-thunderbird-up-to-1027-memory-corruption-euvd-2023-29653/ https://tsecurity.de/de/4294784/sicherheitsluecken-cve/cve-2023-25746-mozilla-thunderbird-up-to-1027-memory-corruption-euvd-2023-29653/ Sat, 24 Oct 2026 16:23:23 +0200 A vulnerability has been found in Mozilla Thunderbird up to 102.7 and classified as critical. This issue affects some unknown processing. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2023-25746. The attack is possible to be carried out remotely. No exploit exists. The affected component should be... Weiterlesen

]]> https://tsecurity.de/de/4294783/sicherheitsluecken-cve/cve-2023-0547-mozilla-thunderbird-up-to-1029-ocsp-revocation-status-certificate-validation-bug-1811298-euvd-2023-12592/ https://tsecurity.de/de/4294783/sicherheitsluecken-cve/cve-2023-0547-mozilla-thunderbird-up-to-1029-ocsp-revocation-status-certificate-validation-bug-1811298-euvd-2023-12592/ Sat, 24 Oct 2026 16:23:23 +0200 A vulnerability categorized as problematic has been discovered in Mozilla Thunderbird up to 102.9. This issue affects some unknown processing of the component OCSP Revocation Status Handler. Such manipulation leads to improper certificate validation. This vulnerability is referenced as CVE-2023-0547. It is possible to launch the attack remotely.... Weiterlesen

]]> https://tsecurity.de/de/4294782/sicherheitsluecken-cve/cve-2023-25751-mozilla-firefox-up-to-110-jit-code-remote-code-execution-bug-1814899-euvd-2023-29658/ https://tsecurity.de/de/4294782/sicherheitsluecken-cve/cve-2023-25751-mozilla-firefox-up-to-110-jit-code-remote-code-execution-bug-1814899-euvd-2023-29658/ Sat, 24 Oct 2026 16:23:22 +0200 A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 110. The affected element is an unknown function of the component JIT Code Handler. Such manipulation leads to Remote Code Execution. This vulnerability is listed as CVE-2023-25751. The attack may be performed from remote. There is no available exploit. It is... Weiterlesen

]]> https://tsecurity.de/de/4294781/sicherheitsluecken-cve/cve-2023-25744-mozilla-firefox-up-to-109-memory-corruption-euvd-2023-29651/ https://tsecurity.de/de/4294781/sicherheitsluecken-cve/cve-2023-25744-mozilla-firefox-up-to-109-memory-corruption-euvd-2023-29651/ Sat, 24 Oct 2026 16:23:21 +0200 A vulnerability classified as critical was found in Mozilla Firefox up to 109. This affects an unknown function. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2023-25744. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised. Weiterlesen

]]> https://tsecurity.de/de/4294780/sicherheitsluecken-cve/cve-2023-25738-mozilla-firefox-up-to-109-on-windows-printing-out-of-bounds-bug-1811852-euvd-2023-29645/ https://tsecurity.de/de/4294780/sicherheitsluecken-cve/cve-2023-25738-mozilla-firefox-up-to-109-on-windows-printing-out-of-bounds-bug-1811852-euvd-2023-29645/ Sat, 24 Oct 2026 16:23:21 +0200 A vulnerability has been found in Mozilla Firefox up to 109 on Windows and classified as problematic. This affects an unknown function of the component Printing Handler. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2023-25738. The attack is possible to be carried out remotely. No exploit exists.... Weiterlesen

]]> https://tsecurity.de/de/4294779/sicherheitsluecken-cve/cve-2023-23601-mozilla-firefox-up-to-108-url-cross-domain-policy-bug-1794268-euvd-2023-27701/ https://tsecurity.de/de/4294779/sicherheitsluecken-cve/cve-2023-23601-mozilla-firefox-up-to-108-url-cross-domain-policy-bug-1794268-euvd-2023-27701/ Sat, 24 Oct 2026 16:23:21 +0200 A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 108. Affected by this issue is some unknown functionality of the component URL Handler. This manipulation causes permissive cross-domain policy with untrusted domains. The identification of this vulnerability is CVE-2023-23601. It is possible to initiate... Weiterlesen

]]> https://tsecurity.de/de/4294778/sicherheitsluecken-cve/cve-2026-63272-document-foundation-libreoffice-up-to-2624-heap-based-overflow-euvd-2026-84352-wid-sec-2026-3521/ https://tsecurity.de/de/4294778/sicherheitsluecken-cve/cve-2026-63272-document-foundation-libreoffice-up-to-2624-heap-based-overflow-euvd-2026-84352-wid-sec-2026-3521/ Sat, 24 Oct 2026 16:23:20 +0200 A vulnerability marked as critical has been reported in Document Foundation LibreOffice up to 26.2.4. This affects an unknown function. Performing a manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2026-63272. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade... Weiterlesen

]]> https://tsecurity.de/de/4294777/sicherheitsluecken-cve/cve-2026-63273-document-foundation-libreoffice-up-to-2624-heap-based-overflow-euvd-2026-84353-wid-sec-2026-3521/ https://tsecurity.de/de/4294777/sicherheitsluecken-cve/cve-2026-63273-document-foundation-libreoffice-up-to-2624-heap-based-overflow-euvd-2026-84353-wid-sec-2026-3521/ Sat, 24 Oct 2026 16:23:19 +0200 A vulnerability classified as critical has been found in Document Foundation LibreOffice up to 26.2.4. Affected is an unknown function. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-63273. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade... Weiterlesen

]]> https://tsecurity.de/de/4294776/sicherheitsluecken-cve/cve-2026-63274-document-foundation-libreoffice-up-to-2624-pdf-import-heap-based-overflow-euvd-2026-84354-nessus-id-365560/ https://tsecurity.de/de/4294776/sicherheitsluecken-cve/cve-2026-63274-document-foundation-libreoffice-up-to-2624-pdf-import-heap-based-overflow-euvd-2026-84354-nessus-id-365560/ Sat, 24 Oct 2026 16:23:19 +0200 A vulnerability, which was classified as critical, has been found in Document Foundation LibreOffice up to 26.2.4. Affected by this issue is some unknown functionality of the component PDF Import. This manipulation causes heap-based buffer overflow. The identification of this vulnerability is CVE-2026-63274. It is possible to initiate the attack... Weiterlesen

]]> https://tsecurity.de/de/4294775/sicherheitsluecken-cve/cve-2026-63279-document-foundation-libreoffice-up-to-2624-pict-image-out-of-bounds-euvd-2026-84358-wid-sec-2026-3521/ https://tsecurity.de/de/4294775/sicherheitsluecken-cve/cve-2026-63279-document-foundation-libreoffice-up-to-2624-pict-image-out-of-bounds-euvd-2026-84358-wid-sec-2026-3521/ Sat, 24 Oct 2026 16:23:19 +0200 A vulnerability categorized as critical has been discovered in Document Foundation LibreOffice up to 26.2.4. Impacted is an unknown function of the component PICT Image Handler. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-63279. The attack can be launched remotely. No exploit exists. It is advisable... Weiterlesen

]]> https://tsecurity.de/de/4294774/sicherheitsluecken-cve/cve-2026-63278-document-foundation-libreoffice-up-to-2624-url-expansion-information-disclosure-euvd-2026-84357-wid-sec-2026-3521/ https://tsecurity.de/de/4294774/sicherheitsluecken-cve/cve-2026-63278-document-foundation-libreoffice-up-to-2624-url-expansion-information-disclosure-euvd-2026-84357-wid-sec-2026-3521/ Sat, 24 Oct 2026 16:23:19 +0200 A vulnerability identified as problematic has been detected in Document Foundation LibreOffice up to 26.2.4. The affected element is an unknown function of the component URL Expansion. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-63278. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

]]> https://tsecurity.de/de/4294773/sicherheitsluecken-cve/cve-2026-95511-red-hat-enterprise-linuxhardened-images-78910-serial-backend-privileges-management-euvd-2026-84335-wid-sec-2026-3497/ https://tsecurity.de/de/4294773/sicherheitsluecken-cve/cve-2026-95511-red-hat-enterprise-linuxhardened-images-78910-serial-backend-privileges-management-euvd-2026-84335-wid-sec-2026-3497/ Sat, 24 Oct 2026 16:23:19 +0200 A vulnerability was found in Red Hat Enterprise Linux and Hardened Images 7/8/9/10. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component Serial Backend. Such manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-95511. The attack needs to be... Weiterlesen

]]> https://tsecurity.de/de/4294772/sicherheitsluecken-cve/cve-2026-93990-expat-up-to-284-xml-injection-euvd-2026-83618-nessus-id-348348/ https://tsecurity.de/de/4294772/sicherheitsluecken-cve/cve-2026-93990-expat-up-to-284-xml-injection-euvd-2026-83618-nessus-id-348348/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability classified as problematic has been found in Expat up to 2.8.4. This affects an unknown function. The manipulation leads to xml injection. This vulnerability is uniquely identified as CVE-2026-93990. The attack is possible to be carried out remotely. No exploit exists. Weiterlesen

]]> https://tsecurity.de/de/4294771/sicherheitsluecken-cve/cve-2026-90050-linux-kernel-up-to-73-rc173-rc2-fq-netschedschfqc-fqchange-tcafqquantumtcafqinitialquantum-input-validation-wid-sec-2026-3444/ https://tsecurity.de/de/4294771/sicherheitsluecken-cve/cve-2026-90050-linux-kernel-up-to-73-rc173-rc2-fq-netschedschfqc-fqchange-tcafqquantumtcafqinitialquantum-input-validation-wid-sec-2026-3444/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability has been found in Linux Kernel up to 7.3-rc1/7.3-rc2 and classified as problematic. Affected by this vulnerability is the function fq_change of the file net/sched/sch_fq.c of the component fq. This manipulation of the argument TCA_FQ_QUANTUM/TCA_FQ_INITIAL_QUANTUM causes improper input validation. The identification of this... Weiterlesen

]]> https://tsecurity.de/de/4294770/sicherheitsluecken-cve/cve-2023-24554-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-ssa-491245/ https://tsecurity.de/de/4294770/sicherheitsluecken-cve/cve-2023-24554-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-ssa-491245/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability, which was classified as problematic, has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. Affected is an unknown function of the component PAR File Handler. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2023-24554. It is possible to initiate the attack remotely. There is... Weiterlesen

]]> https://tsecurity.de/de/4294769/sicherheitsluecken-cve/cve-2023-24560-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-write-ssa-491245/ https://tsecurity.de/de/4294769/sicherheitsluecken-cve/cve-2023-24560-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-write-ssa-491245/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability was found in Siemens Solid Edge SE2022 and Solid Edge SE2023. It has been rated as critical. Impacted is an unknown function of the component PAR File Handler. This manipulation causes out-of-bounds write. This vulnerability is registered as CVE-2023-24560. Remote exploitation of the attack is possible. No exploit is available.... Weiterlesen

]]> https://tsecurity.de/de/4294768/sicherheitsluecken-cve/cve-2023-22792-actionpack-gem-up-to-6132-on-ruby-action-dispatch-redos-euvd-2023-0513/ https://tsecurity.de/de/4294768/sicherheitsluecken-cve/cve-2023-22792-actionpack-gem-up-to-6132-on-ruby-action-dispatch-redos-euvd-2023-0513/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability labeled as problematic has been found in actionpack Gem up to 6.1.3.2 on Ruby. This impacts an unknown function of the component Action Dispatch. Such manipulation leads to inefficient regular expression complexity. This vulnerability is uniquely identified as CVE-2023-22792. The attack can only be initiated within the local... Weiterlesen

]]> https://tsecurity.de/de/4294767/sicherheitsluecken-cve/cve-2022-44566-activerecord-gem-on-ruby-postgresql-adapter-denial-of-service-nessus-id-276881/ https://tsecurity.de/de/4294767/sicherheitsluecken-cve/cve-2022-44566-activerecord-gem-on-ruby-postgresql-adapter-denial-of-service-nessus-id-276881/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability identified as problematic has been detected in activerecord Gem on Ruby. This affects an unknown function of the component PostgreSQL Adapter. This manipulation causes denial of service. This vulnerability is handled as CVE-2022-44566. The attack can only be done within the local network. There is not any exploit available. You... Weiterlesen

]]> https://tsecurity.de/de/4294766/sicherheitsluecken-cve/cve-2023-24558-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-ssa-491245/ https://tsecurity.de/de/4294766/sicherheitsluecken-cve/cve-2023-24558-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-ssa-491245/ Sat, 24 Oct 2026 16:23:18 +0200 A vulnerability was found in Siemens Solid Edge SE2022 and Solid Edge SE2023. It has been classified as problematic. This vulnerability affects unknown code of the component PAR File Handler. The manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2023-24558. The attack may be initiated remotely. There is no available... Weiterlesen

]]> https://tsecurity.de/de/4294765/sicherheitsluecken-cve/cve-2023-24557-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-ssa-491245/ https://tsecurity.de/de/4294765/sicherheitsluecken-cve/cve-2023-24557-siemens-solid-edge-se2022solid-edge-se2023-par-file-out-of-bounds-ssa-491245/ Sat, 24 Oct 2026 16:23:17 +0200 A vulnerability was found in Siemens Solid Edge SE2022 and Solid Edge SE2023 and classified as problematic. This affects an unknown part of the component PAR File Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2023-24557. The attack can be launched remotely. No exploit exists. It is suggested... Weiterlesen

]]> https://tsecurity.de/de/4294764/sicherheitsluecken-cve/cve-2023-24551-siemens-solid-edge-se2022solid-edge-se2023-par-file-heap-based-overflow-ssa-491245/ https://tsecurity.de/de/4294764/sicherheitsluecken-cve/cve-2023-24551-siemens-solid-edge-se2022solid-edge-se2023-par-file-heap-based-overflow-ssa-491245/ Sat, 24 Oct 2026 16:23:17 +0200 A vulnerability described as critical has been identified in Siemens Solid Edge SE2022 and Solid Edge SE2023. The impacted element is an unknown function of the component PAR File Handler. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is handled as CVE-2023-24551. The attack can be executed remotely. There is... Weiterlesen

]]> https://tsecurity.de/de/4294763/sicherheitsluecken-cve/cve-2022-47977-siemens-jt-openjt-utilities-up-to-1122x1322x-jt-file-memory-corruption-ssa-836777/ https://tsecurity.de/de/4294763/sicherheitsluecken-cve/cve-2022-47977-siemens-jt-openjt-utilities-up-to-1122x1322x-jt-file-memory-corruption-ssa-836777/ Sat, 24 Oct 2026 16:23:16 +0200 A vulnerability was found in Siemens JT Open and JT Utilities up to 11.2.2.x/13.2.2.x. It has been rated as critical. This affects an unknown part of the component JT File Handler. The manipulation leads to memory corruption. This vulnerability is documented as CVE-2022-47977. The attack can be initiated remotely. There is not any exploit... Weiterlesen

]]> https://tsecurity.de/de/4294762/sicherheitsluecken-cve/cve-2022-31808-siemens-sipass-integrated-ac5102sipass-integrated-acc-ap-telnet-command-line-interface-parser-command-injection-ssa-658793/ https://tsecurity.de/de/4294762/sicherheitsluecken-cve/cve-2022-31808-siemens-sipass-integrated-ac5102sipass-integrated-acc-ap-telnet-command-line-interface-parser-command-injection-ssa-658793/ Sat, 24 Oct 2026 16:23:16 +0200 A vulnerability has been found in Siemens SiPass integrated AC5102 and SiPass integrated ACC-AP and classified as critical. This impacts an unknown function of the component Telnet Command Line Interface Parser. This manipulation causes command injection. This vulnerability is tracked as CVE-2022-31808. The attack is possible to be carried out... Weiterlesen

]]> https://tsecurity.de/de/4294761/sicherheitsluecken-cve/cve-2023-22799-globalid-gem-prior-101-on-ruby-redos-euvd-2023-0304/ https://tsecurity.de/de/4294761/sicherheitsluecken-cve/cve-2023-22799-globalid-gem-prior-101-on-ruby-redos-euvd-2023-0304/ Sat, 24 Oct 2026 16:23:15 +0200 A vulnerability has been found in GlobalID Gem on Ruby and classified as problematic. Impacted is an unknown function. Performing a manipulation results in inefficient regular expression complexity. This vulnerability is cataloged as CVE-2023-22799. The attack must originate from the local network. There is no exploit available. The affected... Weiterlesen

]]> https://tsecurity.de/de/4294760/sicherheitsluecken-cve/cve-2023-24991-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294760/sicherheitsluecken-cve/cve-2023-24991-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:12 +0200 A vulnerability classified as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. This vulnerability affects unknown code of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is known as CVE-2023-24991. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

]]> https://tsecurity.de/de/4294759/sicherheitsluecken-cve/cve-2023-24992-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294759/sicherheitsluecken-cve/cve-2023-24992-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:11 +0200 A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation 16.0.5. This issue affects some unknown processing of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write. This vulnerability is handled as CVE-2023-24992. The attack can be executed remotely. There is not any exploit... Weiterlesen

]]> https://tsecurity.de/de/4294758/sicherheitsluecken-cve/cve-2023-24561-siemens-solid-edge-se2022solid-edge-se2023-par-file-uninitialized-pointer-ssa-491245/ https://tsecurity.de/de/4294758/sicherheitsluecken-cve/cve-2023-24561-siemens-solid-edge-se2022solid-edge-se2023-par-file-uninitialized-pointer-ssa-491245/ Sat, 24 Oct 2026 16:23:10 +0200 A vulnerability categorized as critical has been discovered in Siemens Solid Edge SE2022 and Solid Edge SE2023. The affected element is an unknown function of the component PAR File Handler. Such manipulation leads to uninitialized pointer. This vulnerability is documented as CVE-2023-24561. The attack can be executed remotely. There is not any... Weiterlesen

]]> https://tsecurity.de/de/4294757/sicherheitsluecken-cve/cve-2023-24563-siemens-solid-edge-se2022solid-edge-se2023-par-file-uninitialized-pointer-ssa-491245/ https://tsecurity.de/de/4294757/sicherheitsluecken-cve/cve-2023-24563-siemens-solid-edge-se2022solid-edge-se2023-par-file-uninitialized-pointer-ssa-491245/ Sat, 24 Oct 2026 16:23:09 +0200 A vulnerability labeled as critical has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. This affects an unknown function of the component PAR File Handler. Executing a manipulation can lead to uninitialized pointer. This vulnerability appears as CVE-2023-24563. The attack may be performed from remote. There is no available exploit.... Weiterlesen

]]> https://tsecurity.de/de/4294756/sicherheitsluecken-cve/cve-2023-24990-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294756/sicherheitsluecken-cve/cve-2023-24990-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:07 +0200 A vulnerability described as critical has been identified in Siemens Tecnomatix Plant Simulation 16.0.5. This affects an unknown part of the component SPP File Handler. Such manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2023-24990. The attack may be launched remotely. There is no exploit available. Upgrading the... Weiterlesen

]]> https://tsecurity.de/de/4294755/sicherheitsluecken-cve/cve-2023-24988-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294755/sicherheitsluecken-cve/cve-2023-24988-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:07 +0200 A vulnerability labeled as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this vulnerability is an unknown functionality of the component SPP File Handler. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2023-24988. The attack can be launched remotely. No exploit exists.... Weiterlesen

]]> https://tsecurity.de/de/4294754/sicherheitsluecken-cve/cve-2023-24986-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294754/sicherheitsluecken-cve/cve-2023-24986-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:02 +0200 A vulnerability categorized as critical has been discovered in Siemens Tecnomatix Plant Simulation 16.0.5. This impacts an unknown function of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write. This vulnerability is registered as CVE-2023-24986. It is possible to launch the attack remotely. No exploit is... Weiterlesen

]]> https://tsecurity.de/de/4294753/sicherheitsluecken-cve/cve-2023-24983-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294753/sicherheitsluecken-cve/cve-2023-24983-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:02 +0200 A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been classified as critical. The affected element is an unknown function of the component SPP File Handler. This manipulation causes out-of-bounds write. This vulnerability is tracked as CVE-2023-24983. The attack is possible to be carried out remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4294752/sicherheitsluecken-cve/cve-2023-24985-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294752/sicherheitsluecken-cve/cve-2023-24985-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 16:23:02 +0200 A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been rated as critical. This affects an unknown function of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2023-24985. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

]]> https://tsecurity.de/de/4294751/sicherheitsluecken-cve/cve-2023-24978-siemens-tecnomatix-plant-simulation-1605-spp-file-uninitialized-pointer-ssa-847261/ https://tsecurity.de/de/4294751/sicherheitsluecken-cve/cve-2023-24978-siemens-tecnomatix-plant-simulation-1605-spp-file-uninitialized-pointer-ssa-847261/ Sat, 24 Oct 2026 16:23:02 +0200 A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this issue is some unknown functionality of the component SPP File Handler. Such manipulation leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2023-24978. The attack can be launched remotely. No exploit... Weiterlesen

]]> https://tsecurity.de/de/4294738/sicherheitsluecken-cve/kritische-sicherheitsluecke-in-brotli-gefaehrdet-nodejs-python-und-weitere-anwendungen/ https://tsecurity.de/de/4294738/sicherheitsluecken-cve/kritische-sicherheitsluecke-in-brotli-gefaehrdet-nodejs-python-und-weitere-anwendungen/ Sat, 24 Oct 2026 16:18:34 +0200 Kritische Sicherheitslücke in Brotli gefährdet Node.js, Python und weitere Anwendungen Matthias Heinemann Sa., 24.10.2026 - 12:36 Eine Schwachstelle im weitverbreiteten Brotli-Dekomprimierer ermöglicht es Angreifern, mit manipulierten komprimierten Daten Speicherfehler auszulösen und unter Umständen Schadcode auszuführen. News Weiterlesen über... Weiterlesen

]]> https://tsecurity.de/de/4294735/sicherheitsluecken-cve/php2shell-critical-php-rce-flaws-and-how-to-patch-them/ https://tsecurity.de/de/4294735/sicherheitsluecken-cve/php2shell-critical-php-rce-flaws-and-how-to-patch-them/ Sat, 24 Oct 2026 16:17:12 +0200 PHP2Shell hit on October 21 with two critical 9.2-rated flaws, CVE-2026-109618 and CVE-2026-109619, now patched, while a third issue, CVE-2026-115560, remains unpatched with only a mitigation. This guide explains what each flaw breaks, then walks through patching and verifying PHP on Ubuntu, Fedora, and CachyOS so you know the fix is live. Weiterlesen

]]> https://tsecurity.de/de/4294584/sicherheitsluecken-cve/elcomsoft-discovers-vulnerability-in-nikons-image-authentication-system/ https://tsecurity.de/de/4294584/sicherheitsluecken-cve/elcomsoft-discovers-vulnerability-in-nikons-image-authentication-system/ Sat, 24 Oct 2026 16:03:57 +0200 Weiterlesen

]]> https://tsecurity.de/de/4294310/reverse-engineering/dsh-infinite-gen-5/ https://tsecurity.de/de/4294310/reverse-engineering/dsh-infinite-gen-5/ Sat, 24 Oct 2026 15:45:17 +0200 DeepSeek v4.1 flash reverse engineering tool (unlimited fifth generation) Please Star and bookmark ⭐Everyone is welcome to submit improvements to the project Weiterlesen

]]> https://tsecurity.de/de/4294309/sicherheitsluecken-cve/promptfoo-v01250/ https://tsecurity.de/de/4294309/sicherheitsluecken-cve/promptfoo-v01250/ Sat, 24 Oct 2026 15:45:17 +0200 Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic. Weiterlesen

]]> https://tsecurity.de/de/4294298/sicherheitsluecken-cve/bund-sieht-bislang-keine-schaeden-durch-php-sicherheitsluecke-die-zeit/ https://tsecurity.de/de/4294298/sicherheitsluecken-cve/bund-sieht-bislang-keine-schaeden-durch-php-sicherheitsluecke-die-zeit/ Sat, 24 Oct 2026 15:41:48 +0200 Damit könnten potenziell sehr viele Systeme von der Schwachstelle betroffen sein. Mehr zum Thema. Cybersicherheit. Sicherheitslücke bei PHP: PHP: Was ... Weiterlesen

]]> https://tsecurity.de/de/4294281/sicherheitsluecken-cve/brotli-decoder-flaw-behind-nodejs-rce-also-affects-bun-python-and-other-widely-used-software/ https://tsecurity.de/de/4294281/sicherheitsluecken-cve/brotli-decoder-flaw-behind-nodejs-rce-also-affects-bun-python-and-other-widely-used-software/ Sat, 24 Oct 2026 15:33:24 +0200 A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's... Weiterlesen

]]> https://tsecurity.de/de/4294185/sicherheitsluecken-cve/openai-ai-agents-exploit-zero-day-vulnerabilities-to-escape-sandboxes-and-access-host-systems/ https://tsecurity.de/de/4294185/sicherheitsluecken-cve/openai-ai-agents-exploit-zero-day-vulnerabilities-to-escape-sandboxes-and-access-host-systems/ Sat, 24 Oct 2026 15:21:17 +0200 OpenAI disclosed that its AI agents escaped hardened virtual machines, bypassed network restrictions, and exchanged information across isolated environments during an internal red-teaming campaign. Published October 23, the findings describe weaknesses in frontier-model research infrastructure, not demonstrated compromises of customer-facing... Weiterlesen

]]> https://tsecurity.de/de/4294164/sicherheitsluecken-cve/cve-2023-24995-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294164/sicherheitsluecken-cve/cve-2023-24995-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 12:24:35 +0200 A vulnerability has been found in Siemens Tecnomatix Plant Simulation 16.0.5 and classified as critical. The impacted element is an unknown function of the component SPP File Handler. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2023-24995. It is possible to initiate the attack remotely. There is no... Weiterlesen

]]> https://tsecurity.de/de/4294163/sicherheitsluecken-cve/cve-2023-24993-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ https://tsecurity.de/de/4294163/sicherheitsluecken-cve/cve-2023-24993-siemens-tecnomatix-plant-simulation-1605-spp-file-out-of-bounds-write-ssa-847261/ Sat, 24 Oct 2026 12:24:31 +0200 A vulnerability, which was classified as critical, has been found in Siemens Tecnomatix Plant Simulation 16.0.5. Impacted is an unknown function of the component SPP File Handler. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2023-24993. The attack is possible to be carried out remotely. No exploit... Weiterlesen

]]>