EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2026-102490 | Zammad privileges management (WID-SEC-2026-3694)(02.10.2026 um 22:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-102489 | Zammad up to 6.5.4/7.1.3 session fixiation (WID-SEC-2026-3694)(02.10.2026 um 22:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58268 | WPMK PDF Generator Plugin up to 1.0.1 on WordPress cross-site request forgery(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58244 | Anps Constructo Plugin up to 4.3.9 on WordPress cross-site request forgery(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58222 | Maidul Team Manager Plugin up to 2.3.14 on WordPress authorization(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58255 | yonisink Custom Post Type Images Plugin up to 0.5 on WordPress cross-site request forgery(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58662 | awesomesupport Awesome Support Plugin up to 6.3.4 on WordPress deserialization(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58269 | weDevs WP Project Manager Plugin up to 2.6.25 on WordPress hard-coded credentials(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58256 | Jonathan Brinley DOAJ Export Plugin up to 1.0.4 on WordPress cross site scripting(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58266 | Fumiki Takahashi Gianism Plugin up to 5.2.2 on WordPress cross site scripting(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-102490 | Zammad privileges management (WID-SEC-2026-3694)(02.10.2026 um 22:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-102489 | Zammad up to 6.5.4/7.1.3 session fixiation (WID-SEC-2026-3694)(02.10.2026 um 22:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58268 | WPMK PDF Generator Plugin up to 1.0.1 on WordPress cross-site request forgery(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58244 | Anps Constructo Plugin up to 4.3.9 on WordPress cross-site request forgery(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58222 | Maidul Team Manager Plugin up to 2.3.14 on WordPress authorization(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58255 | yonisink Custom Post Type Images Plugin up to 0.5 on WordPress cross-site request forgery(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58662 | awesomesupport Awesome Support Plugin up to 6.3.4 on WordPress deserialization(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58269 | weDevs WP Project Manager Plugin up to 2.6.25 on WordPress hard-coded credentials(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58256 | Jonathan Brinley DOAJ Export Plugin up to 1.0.4 on WordPress cross site scripting(02.10.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-58266 | Fumiki Takahashi Gianism Plugin up to 5.2.2 on WordPress cross site scripting(02.10.2026 um 22:17 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
Reverse Engineering (12)

Reverse Engineering

Spezifische Bereiche: Alle Reverse Engineering (12) Sicherheitslücken (CVE) ↗ Admin & Dev Tools ↗
LIVE …
12 Meldungen 1 aktiv
Aktiv: Vektor: PoC & Exploit Zurücksetzen
Alle (12) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
12 Meldungen
Plattformweite Suche ↗

Cyber Threat Intelligence & Forensik

ATT&CK-Taktiken über die sichtbaren Meldungen dieser Kategorie
MITRE ATT&CK HEATMAP 4 von 6 Meldungen kartiert
Live TTP Radar (Klick filtert Ansicht)
Initial Access 3
Privilege Escalation 1
MITRE ATT&CK Matrix Navigator
Enterprise-Matrix · nur belegte Techniken
14 Taktiken
2 belegte Techniken
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
T1068TA0004 · Privilege Escalation
Exploitation for Privilege Escalation
Mitigation: M1026 Privileged Account Management & Patching
Quelle: Kontext-Klassifikation des Artikeltextes
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
Nur belegte ATT&CK-Techniken werden kartiert — Taktiken ohne Beleg bleiben unausgefüllt.Enterprise Matrix v14.1

Heute

Sicherheitslücken (CVE) CyberInsider

FortiMail zero-day exploited in attacks as CISA urges immediate patching

A critical zero-day vulnerability in Fortinet FortiMail is being actively exploited in the wild, prompting the US Cybersecurity and Infrastructure…

🛡️ Security Fix KEV ACTIVE TA0001 · T1190
vor 3 Std. 1 Min
0
Weiterlesen
www.theregister.comFortinet sounds the alarm over actively exploited FortiMail zero-dayvor 9 Std.Help Net SecurityCritical FortiMail zero-day exploited in the wild (CVE-2026-104286)vor 11 Std.SecurityWeekExploited Fortinet FortiMail Zero-Day Calls for Urgent Actionvor 12 Std.Security AffairsU.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalogvor 14 Std.The Hacker NewsCritical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writesvor 14 Std.BleepingComputerFortinet warns of critical FortiMail flaw exploited in zero-day attacksvor 21 Std.
Sicherheitslücken (CVE) Cyber Security News

Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access

Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session…

KEV ACTIVE TA0004 · T1068 Cloud & IT-Enterprise
vor 8 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Cyber Security News

PS5 Relapse Jailbreak Uses WebKit and Kernel Exploit to Gain Read/Write Access

A newly published proof-of-concept called Relapse-Exploit targets PlayStation 5 consoles running firmware versions 7.00 through 13.

TA0004 · T1068
vor 8 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) infosecurity-magazine.com

Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

🛡️ Security Fix
vor 12 Std. 1 Min
0
Weiterlesen

Gestern

Sicherheitslücken (CVE) theregister.com

Microsoft catches hackers exploiting Zimbra bug before disclosure

Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid…

KEV ACTIVE EPSS 11.7% TA0001 · T1190
vor 1 Tag 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) infosecurity-magazine.com

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

🛡️ Security Fix TA0001 · T1190
vor 1 Tag 1 Min
0
Weiterlesen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Reverse Engineering 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
LIVE VECTOR
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken