Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.570 | 0,9 % |
| ≥10 % | 23.060 | 5,7 % |
| <10 % | 380.695 | 93,3 % |
CVE-2026-119083 – GluonTS arbitrary file write during archive extraction
Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction utility in G
Zyxel fixes an actively exploited zero-day.
Multiple Asian airlines disclose third-party breaches. GhostMap can disable Android phones via malicious apps. Weiterlesen
Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more inte
KI beschleunigt Zero-Day-Entdeckung – doch Patch-Lücken bleiben Risiko
LONDON (IT BOLTWISE) – KI-gestützte Cyber-Tools machen es inzwischen deutlich leichter, neue Schwachstellen schneller zu finden. Gleichzeitig zeigt eine Analyse zu CVEs, dass gerade Netzwerkappliances und manche Server über Jahre hinweg zu
CVE-2025-61121 | Glority Mobile Scanner App 2.12.38 on Android com.glority.everlens information disclosure
A vulnerability was found in Glority Mobile Scanner App 2.12.38 on Android. It has been rated as problematic. The affected element is an unknown function of the component com.glority.everlens. This manipulation causes information disclosure
CVE-2025-61120 | IO FIT AG Life Logger App up to 1.0.2.72 on Android com.donki.healthy information disclosure
A vulnerability marked as problematic has been reported in IO FIT AG Life Logger App up to 1.0.2.72 on Android. Affected is an unknown function of the component com.donki.healthy. The manipulation leads to information disclosure. This vulne
CVE-2025-61119 | Kanova App 1.0.27 on Android access control
A vulnerability was found in Kanova App 1.0.27 on Android. It has been classified as critical. The impacted element is an unknown function. This manipulation causes improper access controls. This vulnerability is handled as CVE-2025-61119.
CVE-2025-61118 | mCarFix Motorists App 2.3 on Android com.skytop.mcarfix access control
A vulnerability has been found in mCarFix Motorists App 2.3 on Android and classified as critical. Impacted is an unknown function of the component com.skytop.mcarfix. The manipulation leads to improper access controls. This vulnerability i
CVE-2025-61116 | AdForest App 4.0.12 on Android scriptsbundle.adforest access control
A vulnerability, which was classified as critical, has been found in AdForest App 4.0.12 on Android. This vulnerability affects unknown code of the component scriptsbundle.adforest. Performing a manipulation results in improper access contr
CVE-2025-61114 | 2nd Line App up to 1.2.92 on Android com.mysecondline.app access control
A vulnerability was found in 2nd Line App up to 1.2.92 on Android and classified as critical. The affected element is an unknown function of the component com.mysecondline.app. The manipulation results in improper access controls. This vuln
CVE-2025-61113 | TalkTalk App 3.3.6 on Android API Endpoint access control
A vulnerability classified as critical was found in TalkTalk App 3.3.6 on Android. This affects an unknown part of the component API Endpoint. Such manipulation leads to improper access controls. This vulnerability is documented as CVE-2025
CVE-2025-60950 | AIxBlock Data Preparation unrestricted upload
A vulnerability described as critical has been identified in AIxBlock. This vulnerability affects unknown code of the component Data Preparation. Such manipulation leads to unrestricted upload. This vulnerability is listed as CVE-2025-60950
Windows 11: Sicherheitslücke in Paint kann ohne einen einzigen Klick missbraucht werden
Gefährliche Sicherheitslücken können in so gut wie jedem Windows-Programm auftreten. Jetzt hat es Microsoft Paint getroffen, denn im allseits bekannten Zeichenprogramm von Windows steckt eine Schwachstelle, die Angreifer missbrauchen können
CVE-2024-4693 | QEMU Virtio PCI Binding hw/virtio/virtio-pci.c vhost_net_stop operation after expiration (EUVD-2024-44292 / Nessus ID 209545)
A vulnerability classified as critical has been found in QEMU. This affects the function vhost_net_stop of the file hw/virtio/virtio-pci.c of the component Virtio PCI Binding. The manipulation leads to operation on a resource after expirati
CVE-2024-2496 | libvirt virtinterfaced memory corruption (DLA 3778-1 / EUVD-2024-27445)
A vulnerability has been found in libvirt and classified as critical. Affected by this issue is some unknown functionality of the component virtinterfaced. Performing a manipulation results in memory corruption. This vulnerability is report
CVE-2024-1481 | FreeIPA HTTP Request denial of service (EUVD-2024-17231 / Nessus ID 210488)
A vulnerability was found in FreeIPA. It has been classified as problematic. This issue affects some unknown processing of the component HTTP Request Handler. Performing a manipulation results in denial of service. This vulnerability is ide
CVE-2024-11029 | Red Hat Enterprise Linux 9 FreeIPA API Audit information expsure (EUVD-2024-34378 / Nessus ID 214230)
A vulnerability identified as problematic has been detected in Red Hat Enterprise Linux 7, Enterprise Linux 8 and Enterprise Linux 9. This affects an unknown function of the component FreeIPA API Audit. This manipulation causes exposure of
CVE-2024-0690 | Red Hat Ansible 2.14/2.15/2.16 Log information disclosure (RHSA-2024:0733 / EUVD-2024-0003)
A vulnerability was found in Red Hat Ansible 2.14/2.15/2.16 and classified as problematic. This affects an unknown part of the component Log Handler. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-202
CVE-2023-7192 | Linux Kernel Netfilter nf_conntrack_netlink.c ctnetlink_create_conntrack memory leak (EUVD-2023-59373 / Nessus ID 239742)
A vulnerability marked as problematic has been reported in Linux Kernel. Affected by this issue is the function ctnetlink_create_conntrack of the file net/netfilter/nf_conntrack_netlink.c of the component Netfilter. Performing a manipulatio
CVE-2023-5871 | libnbd up to 1.19.1 NDB Server nbd/server.c nbd_block_status denial of service (EUVD-2023-58145)
A vulnerability identified as problematic has been detected in libnbd up to 1.19.1. Affected is the function nbd_block_status of the file nbd/server.c of the component NDB Server Handler. Performing a manipulation results in denial of servi
CVE-2023-5675 | Red Hat Quarkus RestEasy JAX-RS Endpoint improper authorization
A vulnerability classified as critical has been found in Red Hat Quarkus. This affects an unknown part of the component RestEasy JAX-RS Endpoint. The manipulation leads to improper authorization. This vulnerability is uniquely identified as
CVE-2026-122236 | OpenHands up to 1.24.0 Landing Page missing authentication (Issue 17878)
A vulnerability described as critical has been identified in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication. This vulnerability is listed as CVE-2026
CVE-2026-122191 | itsourcecode Airline Reservation System 1.0 /admin/manage_booked.php id sql injection
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument ID can lead to sql i
CVE-2022-4092 | GitLab Enterprise Edition up to 15.6.0 README Page cross site scripting (Issue 383208 / EUVD-2022-51463)
A vulnerability categorized as problematic has been discovered in GitLab Enterprise Edition up to 15.6.0. Affected by this issue is some unknown functionality of the component README Page. Such manipulation leads to cross site scripting. Th
CVE-2022-4091 | SourceCodester Canteen Management System food.php query product_name cross site scripting (EUVD-2022-51462)
A vulnerability was found in SourceCodester Canteen Management System and classified as problematic. Affected by this issue is the function Query of the file food.php. Such manipulation of the argument product_name leads to cross site scrip
CVE-2022-4090 | rickxy Stock Management System us_transac.php?action=add cross-site request forgery (EUVD-2022-51461)
A vulnerability was found in rickxy Stock Management System and classified as problematic. The affected element is an unknown function of the file us_transac.php?action=add. Executing a manipulation can lead to cross-site request forgery. T
CVE-2025-66373 | Akamai Ghost 2025-03-26/2025-07-21 HTTP Request request smuggling
A vulnerability, which was classified as critical, was found in Akamai Ghost 2025-03-26/2025-07-21. This affects an unknown function of the component HTTP Request Handler. Such manipulation leads to http request smuggling. This vulnerabilit
CVE-2025-63361 | Waveshare RS232-485 to WIFI ETH 3.1.1.0 Administrator Password missing encryption
A vulnerability, which was classified as problematic, has been found in Waveshare RS232-485 to WIFI ETH 3.1.1.0. Affected is an unknown function of the component Administrator Password Handler. Performing a manipulation results in missing e
CVE-2025-61148 | EduplusCampus 3.0.1 Student Payment API /student/get-receipt rec_no resource injection
A vulnerability marked as critical has been reported in EduplusCampus 3.0.1. Impacted is an unknown function of the file /student/get-receipt of the component Student Payment API. Performing a manipulation of the argument rec_no results in
CVE-2025-55948 | yzcheng90 SpringBoot 6.0 Role-Based Access Control access control
A vulnerability was found in yzcheng90 SpringBoot 6.0. It has been declared as critical. Affected by this issue is some unknown functionality of the component Role-Based Access Control. The manipulation results in improper access controls.
CVE-2025-29268 | Allnet ALL-RUT22GW 3.3.8 libicos.so hard-coded credentials
A vulnerability identified as critical has been detected in Allnet ALL-RUT22GW 3.3.8. This affects an unknown part in the library libicos.so. Performing a manipulation results in hard-coded credentials. This vulnerability was named CVE-2025
Windows-Sicherheitslücke: Ausgerechnet Microsoft Paint wird zum Einfallstor für Hacker
Schon Mitte Oktober 2026 hatte Microsoft eine Lücke in seinem Zeichenprogramm Paint gemeldet, über die Hacker:innen Schadcode einschleusen könnten. Ein bereitgestellter Patch scheint aber noch nicht bei allen Nutzer:innen angekommen zu sein
CVE-2025-65345 | alexusmai laravel-file-manager up to 3.3.1 ZIP path traversal
A vulnerability classified as critical was found in alexusmai laravel-file-manager up to 3.3.1. This impacts an unknown function of the component ZIP Handler. Executing a manipulation can lead to path traversal. This vulnerability is tracke
CVE-2025-54307 | Thermo Fisher Torrent Suite Django Application up to 5.18.1 ZIP File Parser zip plupload_file_upload name/filename path traversal
A vulnerability described as critical has been identified in Thermo Fisher Torrent Suite Django Application up to 5.18.1. This impacts the function plupload_file_upload of the file /configure/plugins/plugin/upload/zip/ of the component ZIP
CVE-2025-54306 | Thermo Fisher Torrent Suite Django Application up to 5.18.1 /etc/environment input validation
A vulnerability labeled as problematic has been found in Thermo Fisher Torrent Suite Django Application up to 5.18.1. Affected by this issue is some unknown functionality of the file /etc/environment. The manipulation results in improper in
CVE-2025-54305 | Thermo Fisher Torrent Suite Django Application 5.18.1 LocalhostAuthMiddleware REMOTE_ADDR improper authentication
A vulnerability described as critical has been identified in Thermo Fisher Torrent Suite Django Application 5.18.1. The affected element is an unknown function of the component LocalhostAuthMiddleware. Executing a manipulation of the argume
CVE-2025-54304 | Thermo Fisher Ion Torrent OneTouch 2 INS1005527 Access Control List access control
A vulnerability marked as critical has been reported in Thermo Fisher Ion Torrent OneTouch 2 INS1005527. This affects an unknown part of the component Access Control List Handler. This manipulation causes improper access controls. This vuln
CVE-2025-54303 | Thermo Fisher Torrent Suite Django Application 5.18.1 Django ORM API default credentials
A vulnerability categorized as problematic has been discovered in Thermo Fisher Torrent Suite Django Application 5.18.1. This affects an unknown part of the component Django ORM API. The manipulation results in use of default credentials. T
CVE-2025-53963 | Thermo Fisher Ion Torrent OneTouch 2 INS1005527 default password
A vulnerability identified as very critical has been detected in Thermo Fisher Ion Torrent OneTouch 2 INS1005527. Affected by this vulnerability is an unknown functionality. The manipulation leads to use of default password. This vulnerabil
CVE-2025-50361 | SmallBASIC main.cpp main buffer overflow
A vulnerability labeled as critical has been found in SmallBASIC. This affects the function main of the file main.cpp. Executing a manipulation can lead to buffer overflow. The identification of this vulnerability is CVE-2025-50361. The att
CVE-2026-114426 | SEPPmail Secure Email Gateway up to 15.1.0 resource consumption (WID-SEC-2026-4349)
A vulnerability labeled as problematic has been found in SEPPmail Secure Email Gateway up to 15.1.0. Affected by this issue is some unknown functionality. Executing a manipulation can lead to resource consumption. The identification of this
CVE-2026-114421 | SEPPmail Secure Email Gateway up to 15.1.0 password recovery (WID-SEC-2026-4349)
A vulnerability described as critical has been identified in SEPPmail Secure Email Gateway up to 15.1.0. This vulnerability affects unknown code. The manipulation results in weak password recovery. This vulnerability is identified as CVE-20
CVE-2026-114420 | SEPPmail Secure Email Gateway up to 15.1.0 GINA Web Interface neutralization (WID-SEC-2026-4349)
A vulnerability classified as problematic has been found in SEPPmail Secure Email Gateway up to 15.1.0. This issue affects some unknown processing of the component GINA Web Interface. This manipulation causes improper neutralization. This v
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short
CVE-2024-58400 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send intege
CVE-2024-58399 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF m
CVE-2026-116836 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
CVE-2026-116620 | A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of