Sicherheitslücken (CVE) VulDB Updates 3

CVE-2022-45224 | Web-Based Student Clearance System 1.0 Admin/add-admin.php txtfullname cross site scripting (EUVD-2022-48124)

A vulnerability was found in Web-Based Student Clearance System 1.0 and classified as problematic.

Sicherheitslücken (CVE) DEV Community

A first-day response plan for CVE-2026-84411 in MikroTik RouterOS

A first-day response plan for CVE-2026-84411 in MikroTik RouterOS What is known CVE-2026-84411 affects MikroTik RouterOS before 7.24.

Reverse Engineering Reverse Engineering

BitBlt capture in DWM: suppressing the readback flag (g_pComposition+0x196A) bypasses DisplayAffinity and visual hiding — Part 3

submitted by /u/HawkeyeLab [link] [comments]

Sicherheitslücken (CVE) VulDB Updates 2

CVE-2020-11656 | Oracle ZFS Storage Appliance Kit 8.8 Operating System Image use after free (Nessus ID 352245)

A vulnerability, which was classified as very critical, was found in Oracle ZFS Storage Appliance Kit 8.8.

Sicherheitslücken (CVE) VulDB Updates

CVE-2020-11656 | SQLite up to 3.31.1 ALTER TABLE Statement use after free (ssa-389290 / Nessus ID 352245)

A vulnerability was found in SQLite up to 3.31.1 and classified as critical.

Sicherheitslücken (CVE) Debian Security

DSA-6534-1 webkit2gtk - security update

Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code…

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[remote] Teltonika_RutOS 00.07.06.21 - command injection

Teltonika_RutOS 00.07.06.21 - command injection

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write

TigerGraph_Community_Edition 4.2.4 - arbitrary file write

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] WordPress 7.0.2 - Path Travesal

WordPress 7.0.2 - Path Travesal

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Food-Ordering 1.0 - LFI

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE

Ecava_ntegraXor IGX_16.0.701.10 - RCE

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Krayin CRM 2.2.4 - IDOR

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[webapps] InvoicePlane 1.7.1 - RCE

InvoicePlane 1.7.1 - RCE

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] SuiteCRM 8.10.1 - Authenticated SSRF

SuiteCRM 8.10.1 - Authenticated SSRF

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities

POMS oretnom23v1.0 - SQLi vulnerabilities

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-100885 | Krayin laravel-crm up to 2.2.4 admin-config-setup API Endpoint CanInstall.php authorization (EUVD-2026-88049)

A vulnerability described as critical has been identified in Krayin laravel-crm up to 2.2.4.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-103585 | Wikimedia Foundation MediaWiki 1.43/1.45/1.46 MediaSearch cross site scripting (EUVD-2026-90431)

A vulnerability identified as problematic has been detected in Wikimedia Foundation MediaWiki 1.43/1.45/1.46.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-19553 | Python Software Foundation up to 3.15.x SSLObject ssl.SSLContext.wrap_bio server_hostname input validation (EUVD-2026-90078)

A vulnerability classified as critical has been found in Python Software Foundation Python up to 3.15.x.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-19445 | Python up to 3.15.x SSL Context Management Modules/_ssl.c sni_callback context use after free (EUVD-2026-90077)

A vulnerability classified as problematic was found in Python up to 3.15.x. This affects the function sni_callback of the file Modules/_ssl.

Reverse Engineering Reverse Engineering

HANDLE Duplication internals : What happens behind the scenes when you call kernelbase! DuplicateHandle( )

submitted by /u/_WinAsm [link] [comments]

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45217 | Book Store Management System 1.0.0 Add New System User Level cross site scripting (EUVD-2022-48117)

A vulnerability has been found in Book Store Management System 1.0.0 and classified as problematic.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-54872 | OpenSSL up to 4.0.2 Elliptic-Curve Scalar Multiplication timing discrepancy (Nessus ID 352195)

A vulnerability identified as problematic has been detected in OpenSSL up to 3.0.22/3.4.7/3.5.8/3.6.4/4.0.2.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-35189 | OpenSSL up to 4.0.2 CRL Distribution Points allocation of resources (Nessus ID 352195)

A vulnerability marked as problematic has been reported in OpenSSL up to 3.0.22/3.4.7/3.5.8/3.6.4/4.0.2.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-84782 | OpenSSL up to 4.0.2 DTLS retransmission logic SSL_read out-of-bounds (Nessus ID 352195)

A vulnerability identified as critical has been detected in OpenSSL up to 3.0.22/3.4.7/3.5.8/3.6.4/4.0.2.

Sicherheitslücken (CVE) 2

IT Security News Hourly Summary 2026-10-01 01h : 5 posts

5 posts published in the last hour 22:31Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September…

Sicherheitslücken (CVE) Borns IT- und Windows-Blog

TeamViewer dringend patchen, kritische Schwachstellen gefunden

Der Anbieter der Fernwartungssoftware TeamViewer hat seinen Kunden nahegelegt, zeitnah ältere Instanzen der TeamViewer-Software zu patchen.

Reverse Engineering Reverse Engineering

Loading windows PE .dlls on linux

submitted by /u/0lach [link] [comments]

Reverse Engineering Reverse Engineering

ASM BOTS: Core War where every warrior is raw 8086 machine code you can ndisasm, with an in-browser debugger (step back 256, watches, trace). Open source, MIT

submitted by /u/pedramamini [link] [comments]

Sicherheitslücken (CVE) DEV Community

Sudden Spike in Vulnerability Scanning Across Domains Prompts Enhanced Security Measures

Introduction: Unraveling the Surge in Vulnerability Scanning Over the past one to two months, a startling trend has emerged: vulnerability scanning…

Sicherheitslücken (CVE)

IT Security News Roundup: 2026-09-30

IT Security News: today roundup Microsoft outlined AI-focused security platform updates for Ignite 2026.

Sicherheitslücken (CVE) DEV Community

CVE-2026-96355: How to Inventory Drupal Extensions Before You Patch

CVE-2026-96355: How to Inventory Drupal Extensions Before You Patch Patching is the easy half of the work.