EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2025-9713 | Ivanti Endpoint Manager path traversal (EUVD-2025-34088 / Nessus ID 275450)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-37729 | Elastic Cloud Enterprise up to 3.8.1/4.0.1 Template Engine special elements in template engine (EUVD-2025-34069)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-31995 | HCL MaxAI Workbench input validation (KB0124425)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11629 | RainyGao DocSys up to 2.02.36 /Manage/getUserList.do getUserList sql injection (EUVD-2025-33886)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9626 | Page Blocks Plugin up to 1.1.0 on WordPress admin_process_widget_page_change cross-site request forgery (EUVD-2025-33848)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-8593 | GSheetConnector for Gravity Forms Plugin up to 1.3.27 on WordPress Plugin Installation install_plugin authorization (EUVD-2025-33844)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10375 | accessiBe Plugin up to 2.10 on WordPress Setting cross-site request forgery (EUVD-2025-33840)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11597 | code-projects E-Commerce Website 1.0 product_add_qty.php prod_id sql injection (EUVD-2025-33860)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11611 | SourceCodester Simple Inventory System 1.0 /user.php uemail sql injection (EUVD-2025-33873)(03.10.2026 um 05:32 Uhr)
•
Sichere ProgrammierungSamsung verteilt One UI 9: Diese Galaxy-Smartphones bekommen das Update schon jetzt(03.10.2026 um 06:05 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9713 | Ivanti Endpoint Manager path traversal (EUVD-2025-34088 / Nessus ID 275450)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-37729 | Elastic Cloud Enterprise up to 3.8.1/4.0.1 Template Engine special elements in template engine (EUVD-2025-34069)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-31995 | HCL MaxAI Workbench input validation (KB0124425)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11629 | RainyGao DocSys up to 2.02.36 /Manage/getUserList.do getUserList sql injection (EUVD-2025-33886)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9626 | Page Blocks Plugin up to 1.1.0 on WordPress admin_process_widget_page_change cross-site request forgery (EUVD-2025-33848)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-8593 | GSheetConnector for Gravity Forms Plugin up to 1.3.27 on WordPress Plugin Installation install_plugin authorization (EUVD-2025-33844)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10375 | accessiBe Plugin up to 2.10 on WordPress Setting cross-site request forgery (EUVD-2025-33840)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11597 | code-projects E-Commerce Website 1.0 product_add_qty.php prod_id sql injection (EUVD-2025-33860)(03.10.2026 um 05:32 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11611 | SourceCodester Simple Inventory System 1.0 /user.php uemail sql injection (EUVD-2025-33873)(03.10.2026 um 05:32 Uhr)
•
Sichere ProgrammierungSamsung verteilt One UI 9: Diese Galaxy-Smartphones bekommen das Update schon jetzt(03.10.2026 um 06:05 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
Reverse Engineering (451570)

Reverse Engineering

Spezifische Bereiche: Alle Reverse Engineering (451.570) Sicherheitslücken (CVE) ↗ Admin & Dev Tools ↗
LIVE …
451.570 Meldungen
Alle (451.570) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
451.570 Meldungen
Plattformweite Suche ↗

Cyber Threat Intelligence & Forensik

ATT&CK-Taktiken über die sichtbaren Meldungen dieser Kategorie
MITRE ATT&CK HEATMAP 6 von 28 Meldungen kartiert
Live TTP Radar (Klick filtert Ansicht)
Initial Access 6
MITRE ATT&CK Matrix Navigator
Enterprise-Matrix · nur belegte Techniken
14 Taktiken
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
Nur belegte ATT&CK-Techniken werden kartiert — Taktiken ohne Beleg bleiben unausgefüllt.Enterprise Matrix v14.1

Diese Woche

Sicherheitslücken (CVE) BleepingComputer

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to…

TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-53827 | ownCloud ownCloud Core up to 10.15.2 Updater improper synchronization

A vulnerability marked as problematic has been reported in ownCloud ownCloud Core up to 10.15.2.

🛡️ CVE-2025-53827 Cloud & IT-Enterprise
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-53828 | ownCloud SharePoint for ownCloud up to 0.4.0 SharePoint App server-side request forgery

A vulnerability has been found in ownCloud SharePoint for ownCloud up to 0.4.0 and classified as problematic.

🛡️ CVE-2025-53828 Cloud & IT-Enterprise
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-68195 | Linux Kernel x86_match_min_microcode_rev memory corruption (Nessus ID 279019 / WID-SEC-2025-2868)

This issue looks like a false-positive. Please review the listed sources and think about not using this entry.

🛡️ CVE-2025-68195
vor 2 Tagen 1 Min
0
Weiterlesen
Cyber Security NewsNew BTR Spectre-v2 Attack Leaks Linux Kernel Memory and Steals Root Password Hashesvor 2 Tagen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-69153 | designthemes Trendy Travel Plugin up to 6.7 on WordPress cross site scripting

A vulnerability was found in designthemes Trendy Travel Plugin up to 6.7 on WordPress. It has been rated as problematic.

🛡️ CVE-2025-69153
vor 2 Tagen 1 Min
0
Weiterlesen
VulDB UpdatesCVE-2025-69155 | Designthemes Fitness Zone WordPress Theme up to 5.7 on WordPress cross site scriptingvor 2 Tagen
Sicherheitslücken (CVE) IT Security News

MCP Python SDK Flaw Exposes OAuth Credentials

  A high-severity security vulnerability in the official Model Context Protocol (MCP) Python SDK could allow malicious MCP servers to steal OAuth…

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) The Hacker News

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN…

KEV ACTIVE TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Rapid7 Cybersecurity Bl…Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)vor 2 TagenDEV CommunityCisco SD-WAN Manager CVE-2026-76504 — CVSS 9.8 Auth Bypass via URI Encoding, Actively Exploitedvor 2 Tagen
Sicherheitslücken (CVE) Network World

OpenStack Hibiscus adds DNS security features and confidential computing to the open-source cloud platform

AI is having an oversized impact on the open-source OpenStack cloud infrastructure platform.

Cloud & IT-Enterprise
vor 2 Tagen 1 Min
0
Weiterlesen
Proof of Concept (PoC) Google DeepMind News

Introducing SynthID Bio

Proof of concept for watermarking AI-generated proteins while preserving biological function.

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE)

IT Security News Hourly Summary 2026-09-30 17h : 12 posts

12 posts published in the last hour 14:31Cyber Briefing: 2026.09.

KRITIS / Energie IT Security Nachrichten 65%
vor 2 Tagen 1 Min
0
Weiterlesen
IT Security NewsIT Security News Hourly Summary 2026-09-30 16h : 14 postsvor 2 Tagen
Sicherheitslücken (CVE) BleepingComputer

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively…

🛡️ Security Fix KEV ACTIVE TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) DEV Community

Detection and logging priorities for the exploited NetScaler flaw CVE-2026-88771

Detection and logging priorities for the exploited NetScaler flaw CVE-2026-88771 Vulnerability overview CVE-2026-88771 is a critical vulnerability in…

🛡️ CVE-2026-88771 KEV ACTIVE
vor 2 Tagen 1 Min
0
Weiterlesen
Help Net SecuritySuspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)vor 2 Tagen
Sicherheitslücken (CVE) SecurityWeek

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.

🛡️ Security Fix TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Microsoft Security Blog

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

In this article Attack chain overviewMitigation and protection guidanceReferencesLearn More Microsoft Threat Intelligence identified and tracked…

🛡️ CVE-2026-73570 KEV ACTIVE EPSS 11.7% TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Threat Intelligence

Vulnerability Discovery and Exploitation Trends in the AI Era

Written by: Robin Grunewald, Supriya Mazumdar, Kelli Vanderlee Introduction Google Threat Intelligence Group (GTIG) examines vulnerability disclosure…

🛡️ Security Fix KRITIS / Energie
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) infosecurity-magazine.com

AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Cyber Security News

Hackers Turned a PaperCut Print Server Into a Path to the Domain Controller

A vulnerable print server became the entry point for an Active Directory compromise after attackers exploited two PaperCut MF zero-day flaws.

TA0001 · T1190 Cloud & IT-Enterprise
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Cyber Security News

Docker CopyEscape Vulnerability Lets Containers Write Outside Intended Host Paths

A high-severity Docker vulnerability tracked as CVE-2026-17106, dubbed CopyEscape, can allow a malicious container to create or overwrite files…

🛡️ Security Fix
vor 2 Tagen 1 Min
0
Weiterlesen
GBHackers SecurityDocker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Filesvor 2 Tagen
Sicherheitslücken (CVE) SecurityWeek

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.

🛡️ Security Fix
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Ubuntu security notices

USN-8854-1: OpenStack Keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens.

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Ubuntu security notices

USN-8853-1: OpenSBI vulnerability

It was discovered that OpenSBI did not properly validate the counter index mask in SBI PMU extension requests.

🛡️ Security Fix TA0040 · T1498
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Latest from TechRadar

Notorious Spectre CPU vulnerability returns hitting JIT engines via side channel attacks

New Spectre variant exploits processor prediction behavior in just-in-time compilersResearchers demonstrated practical attacks against Intel-based…

🛡️ Security Fix Kat #Workaround / Mitigation 80%
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) SecurityWeek

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.

🛡️ Security Fix KEV ACTIVE TA0001 · T1190 Gov & Defense
vor 2 Tagen 1 Min
0
Weiterlesen
Reverse Engineering Fossbytes

Creality Sermoon P1S 3D Scanner Launches With PC-Free Operation and 0.02mm Accuracy

3D scanners are useful for everything from reverse engineering and automotive work to creating digital models...

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-67651 | PHP Jabbers Appointment Scheduler cross-site request forgery

A vulnerability classified as problematic was found in PHP Jabbers Appointment Scheduler, Availability Booking Calendar, Availability Calendar, Bus…

🛡️ CVE-2025-67651
vor 2 Tagen 1 Min
0
Weiterlesen
VulDB UpdatesCVE-2025-67650 | PHP Jabbers Appointment Scheduler sql injectionvor 2 Tagen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-67649 | PHP Jabbers Car Rental Script up to 4.0 sql injection

A vulnerability described as critical has been identified in PHP Jabbers Car Rental Script up to 4.0. This affects an unknown part.

🛡️ CVE-2025-67649 TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2026-40552 | BinSoft mpGabinet up to 23.12.19 resource transfer

A vulnerability was found in BinSoft mpGabinet up to 23.12.19. It has been classified as critical. This impacts an unknown function.

🛡️ CVE-2026-40552
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-36374 | IBM DataPower Gateway xml external entity reference

A vulnerability categorized as problematic has been discovered in IBM DataPower Gateway. The affected element is an unknown function.

🛡️ CVE-2025-36374
vor 2 Tagen 1 Min
0
Weiterlesen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Reverse Engineering 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
LIVE VECTOR
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken