EILMELDUNGEN LIVE
Linux Tipps & HardeningDSA-6534-2 webkit2gtk - regression update(02.10.2026 um 02:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-93428 | Ultimate Member Plugin up to 2.13.1 on WordPress authorization (EUVD-2026-91881)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-92243 | vinod-dalvi Ivory Search Plugin up to 5.5.18 on WordPress cross site scripting (EUVD-2026-91880)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-94539 | psmplugins SupportCandy Plugin up to 3.5.3 on WordPress sort_by sql injection (EUVD-2026-91879)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-94378 | psmplugins SupportCandy Plugin up to 3.5.3 on WordPress name cross site scripting (EUVD-2026-91878)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-96270 | Ultimate Member Plugin up to 2.13.1 on WordPress Admin UI jQuery.html form_id cross site scripting (EUVD-2026-91876)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-100180 | jegtheme Jeg Kit for Elementor Plugin up to 3.2.19 on WordPress cross site scripting (EUVD-2026-91877)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-95865 | Beaver Builder Page Builder Plugin up to 2.11.0.5 on WordPress AJAX Endpoint fields[][value] sql injection (EUVD-2026-91875)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-105090 | Formbricks up to 5.4.3/6.0.0 Survey-level Custom Head Scripts feature cross site scripting (EUVD-2026-91874)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-105083 | ImageMagick up to 6.9.13-56/7.1.2-31 Policy Cache policy.xml LoadPolicyCache access control (EUVD-2026-91870)(03.10.2026 um 05:13 Uhr)
•
Linux Tipps & HardeningDSA-6534-2 webkit2gtk - regression update(02.10.2026 um 02:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-93428 | Ultimate Member Plugin up to 2.13.1 on WordPress authorization (EUVD-2026-91881)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-92243 | vinod-dalvi Ivory Search Plugin up to 5.5.18 on WordPress cross site scripting (EUVD-2026-91880)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-94539 | psmplugins SupportCandy Plugin up to 3.5.3 on WordPress sort_by sql injection (EUVD-2026-91879)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-94378 | psmplugins SupportCandy Plugin up to 3.5.3 on WordPress name cross site scripting (EUVD-2026-91878)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-96270 | Ultimate Member Plugin up to 2.13.1 on WordPress Admin UI jQuery.html form_id cross site scripting (EUVD-2026-91876)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-100180 | jegtheme Jeg Kit for Elementor Plugin up to 3.2.19 on WordPress cross site scripting (EUVD-2026-91877)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-95865 | Beaver Builder Page Builder Plugin up to 2.11.0.5 on WordPress AJAX Endpoint fields[][value] sql injection (EUVD-2026-91875)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-105090 | Formbricks up to 5.4.3/6.0.0 Survey-level Custom Head Scripts feature cross site scripting (EUVD-2026-91874)(03.10.2026 um 05:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-105083 | ImageMagick up to 6.9.13-56/7.1.2-31 Policy Cache policy.xml LoadPolicyCache access control (EUVD-2026-91870)(03.10.2026 um 05:13 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
Reverse Engineering (451559)

Reverse Engineering

Spezifische Bereiche: Alle Reverse Engineering (451.559) Sicherheitslücken (CVE) ↗ Admin & Dev Tools ↗
LIVE …
451.559 Meldungen
Alle (451.559) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
451.559 Meldungen
Plattformweite Suche ↗

Cyber Threat Intelligence & Forensik

ATT&CK-Taktiken über die sichtbaren Meldungen dieser Kategorie
MITRE ATT&CK HEATMAP 2 von 20 Meldungen kartiert
Live TTP Radar (Klick filtert Ansicht)
Initial Access 2
MITRE ATT&CK Matrix Navigator
Enterprise-Matrix · nur belegte Techniken
14 Taktiken
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
Nur belegte ATT&CK-Techniken werden kartiert — Taktiken ohne Beleg bleiben unausgefüllt.Enterprise Matrix v14.1

Diese Woche

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-102806 | OpenClaw up to 2026.9.4 Media Pipeline improper authorization (WID-SEC-2026-3673)

A vulnerability was found in OpenClaw. It has been rated as problematic. This affects an unknown part of the component Media Pipeline.

🛡️ CVE-2026-102806
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2026-102621 | Freedesktop Poppler up to 26.08.0 splash/SplashClip.cc SplashClip::clipToPath integer overflow (ID 1763 / WID-SEC-2026-3674)

A vulnerability was found in Freedesktop Poppler up to 26.08.0. It has been declared as problematic.

🛡️ CVE-2026-102621
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) DEV Community

Checkpoint Restore: Destination Policy Was Never Reapplied

A checkpoint restore can rebuild a process from saved state without passing that state back through the destination's normal policy translation.

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) GBHackers Security

Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution

A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute code on vulnerable devices or trigger a…

🛡️ Security Fix TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
BSI Warn- und Informati…[NEU] [hoch] MikroTik RouterOS: Schwachstelle ermöglicht Codeausführung und DoSvor 2 Tagen
Sicherheitslücken (CVE) Vulnerability definition fe…

Stored Cross-Site Scripting in MetaSlider Shortcode Attributes

The metaslider shortcode passed its attributes straight through without sanitising them.

vor 2 Tagen 1 Min
0
Weiterlesen
Vulnerability definitio…Authenticated (Editor+) Stored Cross-Site Scripting in SeedProd Landing Pagesvor 2 TagenVulnerability definitio…Stored Cross-Site Scripting in Elementor Star Rating Widgetvor 2 TagenVulnerability definitio…Stored Cross-Site Scripting in Enable Media Replace file_modified Shortcodevor 2 TagenVulnerability definitio…Stored Cross-Site Scripting in MetaSlider Slideshow Titlevor 2 TagenVulnerability definitio…Stored Cross-Site Scripting in Ocean Extra oceanwp_library Shortcodevor 2 TagenVulnerability definitio…Cross-Site Scripting in LiteSpeed Cache WebP Image Replacementvor 2 TagenVulnerability definitio…Cross-Site Request Forgery in Elementor Website Builder Editor Events REST Proxyvor 2 TagenVulnerability definitio…Authenticated (Admin+) Stored Cross-Site Scripting in Ninja Forms Field Settingsvor 2 TagenVulnerability definitio…Stored Cross-Site Scripting in Fluent Forms AI Form Buildervor 2 TagenVulnerability definitio…Cross-Site Scripting in Ninja Forms Success Message Actionvor 2 Tagen
Sicherheitslücken (CVE) Vulnerability definition fe…

Incorrect Permissions in YITH WooCommerce Wishlist Wishlist Creation

YITH WooCommerce Wishlist up to and including 4.10.0 exposes YITH_WCWL_Wishlists::create() through the unauthenticated REST route…

vor 2 Tagen 1 Min
0
Weiterlesen
Vulnerability definitio…Incorrect Permissions in Spectra Popup Builder REST Endpointsvor 2 Tagen
Sicherheitslücken (CVE) Vulnerability definition fe…

Email Header Injection in Contact Form 7 Mail Additional Headers

Contact Form 7 expanded mail-tags across the entire "Additional headers" mail template in a single pass and appended the result to the outgoing…

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Vulnerability definition fe…

Input Validation in WP Fastest Cache Cache File Path

WP Fastest Cache derives the on-disk cache file path from the incoming request URL. Before 1.4.

vor 2 Tagen 1 Min
0
Weiterlesen
Vulnerability definitio…Missing Authorization in WP Fastest Cache Varnish Cache Actionsvor 2 Tagen
Sicherheitslücken (CVE) Vulnerability definition fe…

Missing Authorization in Custom Post Type UI Post Type Processing

Custom Post Type UI does not check the current user's capabilities before handling post type management requests in cptui_process_post_type().

vor 2 Tagen 1 Min
0
Weiterlesen
Vulnerability definitio…Missing Authorization in Cookie Notice Cache Purge and AJAX Handlersvor 2 TagenVulnerability definitio…Missing Authorization in Google XML Sitemaps Upgrade Handlervor 2 Tagen
Sicherheitslücken (CVE) Vulnerability definition fe…

Unauthenticated Information Disclosure via Repeater Field Merge Tags in Ninja Forms

Ninja Forms up to and including 3.14.0 resolves merge tags inside user-submitted repeater field values during form submission (nf_ajax_submit).

Kat #Workaround / Mitigation 65%
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Vulnerability definition fe…

Unauthenticated SQL Injection in The Events Calendar Custom Tables Query

The Events Calendar up to and including 6.15.1 redirects the ORDER BY clause of event queries through Custom_Tables_Query::parse_orderby(), but falls…

TA0001 · T1190
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Vulnerability definition fe…

Authorization bypass through predictable unsubscribe token in Popup Builder

Popup Builder generates newsletter unsubscribe tokens as an MD5 of the subscriber ID and e-mail address, a value an attacker can reproduce.

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Vulnerability definition fe…

Broken Access Control in Elementor User Query REST Endpoint

The /elementor/v1/user REST endpoint only requires the edit_posts capability, yet it ran its own get_users() query instead of going through WordPress…

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Vulnerability definition fe…

Insecure Direct Object Reference in Fluent Forms Stripe Payment Confirmation

The Stripe SCA payment confirmation endpoints in Fluent Forms accept a submission_id from the request without verifying that the caller is entitled…

Finanzwesen & Banking
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Ubuntu security notices

USN-8852-1: OpenVPN vulnerabilities

It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling.

TA0040 · T1498
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) BSI Warn- und Informationsd…

[NEU] [mittel] Moodle: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um eine…

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) Linux Handbook

Command Conqueror

Command Conqueror is a capture-the-flag game with 10 levels of Linux command line puzzles.

TA0004 · T1068
vor 2 Tagen 1 Min
0
Weiterlesen
Reverse Engineering IT Security News

AI Is Making Software Cheaper to Attack. Defenders Need to Change the Price

By Ansgar Dodt, VP Product Management for Software Monetization at Thales Not every piece of software is worth attacking.

vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2026-75887 | Red Hat OpenShift Container Platform Console /locales/resource.json lng/ns path traversal (EUVD-2026-85702)

A vulnerability categorized as critical has been discovered in Red Hat OpenShift Container Platform.

🛡️ CVE-2026-75887
vor 2 Tagen 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2026-102010 | GCC use after free (EUVD-2026-88443)

A vulnerability was found in GCC. It has been classified as problematic. The impacted element is an unknown function.

🛡️ CVE-2026-102010
vor 2 Tagen 1 Min
0
Weiterlesen
VulDB UpdatesCVE-2026-103113 | OS4ED openSIS-Classic up to 9.3 General Information Tab Student.php save action students sql injection (Issue 475 / EUVD-2026-89762)vor 2 Tagen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Reverse Engineering 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
LIVE VECTOR
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken