Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-29 | 2026-09-02 |
|---|---|---|
| ≥90 % | 4 | 0 |
| ≥50 % | 4 | 0 |
| ≥10 % | 3 | 0 |
| <10 % | 304 | 300 |
Zapscape — Updated!
Guest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers. Weiterlesen
CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit — Updated!
Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and professional reporting (JSON/HTML/PDF). Authori
llama-cpp-security-patches — Updated!
Security patches for unpatched llama.cpp vulnerabilities (CVE-2026-43626 through CVE-2026-43632) — Cyera Research Weiterlesen
ncentral-compromise-ioc-triage — Updated!
Read-only N-able N-central CVE-2026-18556/CVE-2026-18577 post-exploitation IoC hunter for Windows endpoints Weiterlesen
AxHunter — Updated!
PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609). Weiterlesen
CVE-2022-25012-dvr4-weak-password-encryption — Updated!
Decrypts weak encrypted passwords from Argus Surveillance DVR systems via CVE-2022-25012, reconstructing plaintext credentials from DVRParams.ini ciphertext. Weiterlesen
CVE-2026-67620-poc — Updated!
CVE-2026-67620 - Flowise SSRF via incomplete cloud-metadata deny-list (Oracle OCI 192.0.0.192 + Alibaba 100.100.100.200 bypass the DEFAULT_DENY_LIST) Weiterlesen
CVE-2026-25250 — Updated!
Analysis and exploit for CVE-2026-25250, a Secure Boot bypass in Horizon DataSys Reboot Restore where shdloader.efi loads Shield.efi without verification. Weiterlesen
CVE-2025-4275 — Updated!
Analysis and exploitation of CVE-2025-4275 (Hydr0ph0bia), a Secure Boot trust-chain weakness where firmware variables are used to introduce attacker-controlled certificates trusted by subsequent boot components. Weiterlesen
CVE-2025-3052 — Updated!
Research on CVE-2025-3052, an Insyde firmware vulnerability that exposes an arbitrary write primitive capable of modifying security-critical pointers. Weiterlesen
pac4j-check v0.2.0
Offline scanner for CVE-2026-29000 (CVSS 10.0) in org.pac4j:pac4j-jwt. Inspects jars/fat-jars directly, so it works where mvn dependency:tree cannot. Single jar, zero dependencies, Java 8+. Weiterlesen
BAS-Guardian — Updated!
Free BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash. Weiterlesen
CVE-2026-18718 — Updated!
Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector Weiterlesen
YellowKey-Bitlocker-CVE-2026-45585 — Updated!
Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility. Weiterlesen
GitHub Release: ddev/ddev v1.25.4 (03.09.2026)
🛡️ Security Fix ddev/ddevv1.25.403.09.2026@stasadevInstallation See the installation instructions for details, but it's easy: macOS: brew install ddev/ddev/ddev or just brew upgrade ddev. Linux: Use sudo apt-get update && sudo apt-
CVE-2026-39987 — Updated!
Simple POC for CVE-2026-39987 Weiterlesen
CVE-2026-59941 — Updated!
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps Weiterlesen
ghostlock — Updated!
Tracking GhostLock (CVE-2026-43499), the rtmutex/futex stack use-after-free Weiterlesen
Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation — Updated!
Incident Response (IR) case study documenting the investigation of an exploitation attempt targeting CVE-2024-24919 (Arbitrary File Read) on a Check Point Security Gateway. Includes comprehensive SIEM analysis, firewall logs, raw web access
CVE-2026-16723 — Updated!
A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Weiterlesen
CICD-Goat-Vapt-Writeup — Updated!
Full VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI/CD Security Risks, with PoCs, remediation, and interview-ready summaries. Weiterlesen
CVE-2026-8347 — Updated!
CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0 and earlier. The flaw exists in the Express association Reorder dialog, allowing a user with
QuestStack — Updated!
Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931. Weiterlesen
WordPress Plugin All-in-One WP Migration and Backup mit Sicherheitslücke CVE-2026-19949
Kurze Information: Im WordPress Plugin All-in-One WP Migration and Backup gibt es in älteren Versionen die kritische Sicherheitslücke CVE-2026-19949. Benutzer dieses Plugins sollten dieses dringend aktualisieren, da sonst eine Übernahme der
CVE-2026-34220 — Updated!
SQL Injection vulnerability in MikroORM Weiterlesen
USN-8661-4: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate atta
USN-8661-4: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate atta
USN-8715-1: Linux kernel (Oracle) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate atta
USN-8715-1: Linux kernel (Oracle) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate atta
USN-8714-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2
USN-8714-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2
SonicWall SMA1000 Series: Kritische Schwachstelle ausgenutzt (Sept. 2026)
[English]SonicWall, das CERT Austria und das BSI warnen seit dem 1. September 2026 vor zwei kritischen Schwachstellen (CVE-2026-83548, CVE-2026-83549) in der SMA1000-Series des Herstellers SonicWall. Die ungepatchten Instanzen der Secure Mo
USN-8713-1: BioSig vulnerabilities
Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-22891, CVE-2026-20777) Weiterle
USN-8713-1: BioSig vulnerabilities
Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-22891, CVE-2026-20777) Weiterle
SMA-1000-Appliances: SonicWall warnt vor Zero-Day-Attacken
SMA-1000-Appliances: SonicWall warnt vor Zero-Day-Attacken Daniel Richey Mi., 02.09.2026 - 14:50 Zwei Schwachstellen in SonicWalls SMA-1000-VPN-Appliances wurden bereits aktiv ausgenutzt, bevor Patches bereitstanden. Der Hersteller rät zu s
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP
A patched Linux kernel vulnerability in the IPv6 network stack is drawing renewed attention after OpenAI’s agents exploited it. Weiterlesen
Another Artifactory CVE under attack by AI agents or humans
Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor patched the 9.8-rated flaw. And we don't know if that someone is human. Artifac
USN-8712-1: pyasn1 vulnerabilities
It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume
USN-8712-1: pyasn1 vulnerabilities
It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume
Hackers Just Poisoned the Rust Supply Chain | Threat Wire
YouTube Video⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️ @endingwithali → Twitch: https://twitch.tv/endingwithali Twitter: https://twitter.com/endingwithali YouTube: https://youtube.com/@endingwithali Everywhere else: https://links.ali
Angreifer kapern Zimbra-Server über SNMP-Lücke
Angreifer kapern Zimbra-Server über SNMP-Lücke Lars Nitsch Di., 01.09.2026 - 07:00 Eine bereits seit Juli geschlossene Schwachstelle in Zimbra Collaboration wird derzeit aktiv ausgenutzt. CVE-2026-73570 betrifft Systeme mit aktivierter SNMP
Root-Sicherheitslücke bedroht cPanel/WHM
In aktuellen Versionen haben die Entwickler der Webhosting-Control-Panel-Software cPanel/WHM eine Schwachstelle geschlossen. Weiterlesen
Exchange-Sicherheitslücke: 85 Prozent der On-Prem-Server in Deutschland anfällig
Ein Proof-of-Concept-Exploit für eine hochriskante Exchange-Lücke ist öffentlich. 85 Prozent der On-Premises-Server sind anfällig. Weiterlesen
CVE-2026-75757 | Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies (tenant, actor_resource, actor_primary_key, actor_action, actor_domain, actor_authorizing, actor_paused) by matching the cookie name with an unanchored regular expression (new RegE
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin'
CVE-2026-82605 | A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The affected component should be upgraded.
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading
CVE-2026-82604 | A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should upgrade the affected component.
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to vers
CVE-2026-82603 | A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulation of the argument itype/vid results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulation of the argument itype/vid results in path traversal. The at
CVE-2026-82602 | A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclo
CVE-2026-82601 | A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has b
CVE-2026-75760 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message inspected the raw error term (An error occurred while generating embeddings: #{inspect(error)}). A plain-string add_error produces an Ash.Error.Changes.InvalidChange
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider ca
CVE-2026-82580 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools, an exception raised while executing a tool was serialized verbatim with Exception.message/1 into the tool-result content. That content is appended to the conversation, emitted as a {:tool_result, ...} stream event, and sent back to the model, which typically relays it to the user. No
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools, an exception raised while executing a tool was serialized verb
CVE-2026-82579 | Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :tool_calls, then filters the calls through normalize_tool_calls/2 and unprocessed_tool_calls/2. Both can empty the list: a call missing a valid name, or one reusing a tool_call_id that already has a resul
Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a