EILMELDUNGEN LIVE
YouTube Security VideosAndroid Police: Samsung is smashing records! #shorts #tech #phones(21.09.2026 um 13:55 Uhr)
•
YouTube Security Videosheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
•
YouTube Security VideosNeil Patel: Your Google Traffic Isn't An Asset It's A Loan #shorts(21.09.2026 um 14:05 Uhr)
•
YouTube Security VideosfreeCodeCamp.org: Claude Certified Developer Foundations (CCDV-F) Certification Course(21.09.2026 um 14:12 Uhr)
•
Windows Tipps & SecurityF-14 A Tomcat Top Gun endlich als Revell Klemmbausteinmodell erhältlich(21.09.2026 um 14:27 Uhr)
•
Videos & Konferenzenheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
•
Sichere ProgrammierungShow the Hand-Back Sample Before Approving an Agent Score(21.09.2026 um 14:15 Uhr)
•
Sichere ProgrammierungRunning Tetragon in AWS CodeBuild to Block npm postinstall Network Access(21.09.2026 um 14:15 Uhr)
•
Sichere ProgrammierungHybrid retrieval in one Postgres query: RRF over tsvector + pgvector(21.09.2026 um 14:15 Uhr)
•
Sichere ProgrammierungHOLogram deep dive: the Behavioral Privacy Budget — controlling exposure over time(21.09.2026 um 14:16 Uhr)
•
YouTube Security VideosAndroid Police: Samsung is smashing records! #shorts #tech #phones(21.09.2026 um 13:55 Uhr)
•
YouTube Security Videosheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
•
YouTube Security VideosNeil Patel: Your Google Traffic Isn't An Asset It's A Loan #shorts(21.09.2026 um 14:05 Uhr)
•
YouTube Security VideosfreeCodeCamp.org: Claude Certified Developer Foundations (CCDV-F) Certification Course(21.09.2026 um 14:12 Uhr)
•
Windows Tipps & SecurityF-14 A Tomcat Top Gun endlich als Revell Klemmbausteinmodell erhältlich(21.09.2026 um 14:27 Uhr)
•
Videos & Konferenzenheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
•
Sichere ProgrammierungShow the Hand-Back Sample Before Approving an Agent Score(21.09.2026 um 14:15 Uhr)
•
Sichere ProgrammierungRunning Tetragon in AWS CodeBuild to Block npm postinstall Network Access(21.09.2026 um 14:15 Uhr)
•
Sichere ProgrammierungHybrid retrieval in one Postgres query: RRF over tsvector + pgvector(21.09.2026 um 14:15 Uhr)
•
Sichere ProgrammierungHOLogram deep dive: the Behavioral Privacy Budget — controlling exposure over time(21.09.2026 um 14:16 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence

Sicherheitslücken (CVE)

Spezifische Bereiche: Alle Sicherheitslücken (CVE) (195) Proof of Concept (PoC) ↗ Video Analysen ↗
🚨
Netcore • CVE-2026-94097
CVE-2026-94097 | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Advisory ansehen ➔
Aktiv: Vektor: Critical CVSS 9+
Alle (195) 🚨 0-Days & KEV 📺 Videos Podcasts 🐙 Tools 💬 Interaktion
Neueste Wichtigste
195 Meldungen
Plattformweite Suche ↗

Heute

Sicherheitslücken (CVE) BSI Warn- und Informationsd…
[NEU] [UNGEPATCHT] [kritisch] D-LINK Router DIR-822A: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in D-LINK Router DIR-822A ausnutzen, um beliebigen Programmcode auszuführen.

🛡️ Security Fix
vor 2 Std. 1 Min
0
Weiterlesen ↗

Gestern

Sicherheitslücken (CVE) Linux, GNU/Linux, free soft…
Critical 9.8 vulnerability in Unbound up to and including version 1.26.0

submitted by /u/anh0516 [link] [comments]

🛡️ Security Fix
vor 1 Tag 1 Min
0
Weiterlesen ↗

Diese Woche

Sicherheitslücken (CVE) VulDB Updates
CVE-2026-90600 | itsourcecode Sales and Inventory System 1.0 /pages/inv_edit1.php ID sql injection

A vulnerability identified as critical has been detected in itsourcecode Sales and Inventory System 1.0.

🛡️ CVE-2026-90600
vor 1 Tag 1 Min
0
Weiterlesen ↗
VulDB UpdatesCVE-2026-90695 | SourceCodester Inventory Management System 1.0 Vendor Management /api/vendors_handler.php cross site scriptingvor 2 TagenVulDB UpdatesCVE-2026-90700 | itsourcecode Sales and Inventory System 1.0 /pages/pro_edit1.php prodcode sql injectionvor 2 Tagen
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-90582 | evanchiu serverless-todo 1.0.3/2.0.0 API Todo Endpoint src/index.js saveTodos event.body resource consumption (Issue 10)

A vulnerability categorized as problematic has been discovered in evanchiu serverless-todo 1.0.3/2.0.0.

🛡️ CVE-2026-90582
vor 1 Tag 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-9766 | Empik for Woocommerce Plugin up to 1.5.1 on WordPress authorization (EUVD-2026-83566)

A vulnerability has been found in Empik for Woocommerce Plugin up to 1.5.1 on WordPress and classified as problematic.

🛡️ CVE-2026-9766
vor 2 Tagen 1 Min
0
Weiterlesen ↗
VulDB UpdatesCVE-2026-9613 | Datalogics Ecommerce Delivery Plugin up to 2.6.65 on WordPress authorization (EUVD-2026-83569)vor 2 TagenVulDB UpdatesCVE-2026-9858 | wpexpertshub Partial Shipment for WooCommerce Plugin up to 3.4 on WordPress AJAX handlers woocommerce-partial-shipment.php order_id improper authorization (EUVD-2026-83570)vor 2 TagenVulDB UpdatesCVE-2026-92430 | Rede Itaú for WooCommerce Plugin up to 5.4.6 on WordPress authorization (EUVD-2026-83516)vor 2 TagenVulDB UpdatesCVE-2026-92435 | WooCommerce Mailchimp for WooCommerce Plugin up to 6.1.0 on WordPress Permission Callback authorization (EUVD-2026-83517)vor 2 Tagen
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-90598 | jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2 UserController.java UserController.updateUser userid authorization (Issue 172)

A vulnerability was found in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. It has been rated as critical.

🛡️ CVE-2026-90598
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-90514 | SourceCodester School Registration and Fee System 1.0 save_stud.php Status sql injection

A vulnerability described as critical has been identified in SourceCodester School Registration and Fee System 1.0.

🛡️ CVE-2026-90514
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-81000 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Tun tun_get_user align allocation of resources (Nessus ID 348261)

A vulnerability was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. It has been rated as very critical.

🛡️ CVE-2026-81000
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) The Hacker News
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead…

vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-67211 | Apache OpenNLP up to 3.0.0-M5 opennlp-spellcheck extension SymSpellModelSerializer.create unigramCount/bigramCount allocation of resources

A vulnerability, which was classified as problematic, has been found in Apache OpenNLP up to 3.0.0-M5.

🛡️ CVE-2026-67211
vor 2 Tagen 1 Min
0
Weiterlesen ↗
VulDB UpdatesCVE-2026-82617 | Apache OpenNLP up to 2.5.11/3.0.0-M5 RegexNameFinder RegexNameFinderFactory.java RegexNameFinder.find String[] resource consumptionvor 2 Tagen
Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…
Orkes Conductor: kritische RCE-Lücke wird aktiv ausgenutzt – Update dringend

LONDON (IT BOLTWISE) – Eine kritische Sicherheitslücke in Orkes Conductor wird laut Fortinet aktiv ausgenutzt.

vor 2 Tagen 1 Min
0
Weiterlesen ↗
The Hacker NewsCritical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wildvor 2 Tagen
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-80434 | IBM DataStage on Cloud Pak for Data 5.4.0.0 resource injection

A vulnerability identified as critical has been detected in IBM DataStage on Cloud Pak for Data 5.4.0.0. The affected element is an unknown function.

🛡️ CVE-2026-80434
vor 2 Tagen 1 Min
0
Weiterlesen ↗
VulDB UpdatesCVE-2026-73298 | Microsoft Container Migration Solution Accelerator up to 2.1.2 resource injectionvor 2 Tagen
Sicherheitslücken (CVE) Cyber Security News
Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link

WordPress administrators are being urged to update after researchers disclosed Click2Shell, an exploit chain that can turn one malicious link into…

vor 2 Tagen 1 Min
0
Weiterlesen ↗
Patchstack BlogClick2Shell: The RCE WordPress 7.1.1 Just Patchedvor 2 Tagen«Hacker News» 🗞️🦾 IT BO…WordPress Click2Shell: gepatchte Schwachstelle installiert inaktiv ein Theme – kritische Kette zur Codeausführungvor 2 Tagen
Sicherheitslücken (CVE) DEV Community
Reaching an Internal OpenAI Repository Through an HEIF RCE and Overprivileged SSO Token Chain

1. Basic Information Original Title: Hacking OpenAI Source: Hacktron AI Published Date: 2026-09-13 Updated Date: None Severity: Critical Severity…

vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-48702 | Sigstore Rekor up to 1.5.1 APK File pkg/types/alpine/apk.go Package.Unmarshal allocation of resources

A vulnerability labeled as problematic has been found in Sigstore Rekor up to 1.5.1. This affects the function Package.

🛡️ CVE-2026-48702
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-73569 | NaturalIntelligence fast-xml-parser up to 5.10.0 XML Parser OrderedObjParser.js addInputEntities resource consumption

A vulnerability was found in NaturalIntelligence fast-xml-parser up to 5.10.0 and classified as problematic.

🛡️ CVE-2026-73569
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-73232 | ffuf up to 2.1.x Response Size Guard pkg/runner/simple.go io.ReadAll resource consumption (EUVD-2026-56926)

A vulnerability categorized as problematic has been discovered in ffuf up to 2.1.x. Affected by this issue is the function io.

🛡️ CVE-2026-73232
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-48809 | miguelgrinberg python-engineio up to 4.13.1 allocation of resources

A vulnerability was found in miguelgrinberg python-engineio up to 4.13.1. It has been rated as problematic. This affects an unknown part.

🛡️ CVE-2026-48809
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) KitPloit
SmartScanner-Source

Web vulnerability scanner built with C++17 and Qt 6, featuring a GUI, CLI, configurable crawling, and JSON reports.

vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) IT Security News
Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server

Wordfence Argus found a critical CVSS 9.8 vulnerability in libheif, a library many servers use to process HEIC images.

🛡️ Security Fix
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) IT Security News
Docker Fixes Critical Sandboxes Flaw That Could Expose Host Files

  Docker has patched two vulnerabilities in Docker Sandboxes that could allow malicious code running inside an isolated sandbox to cross its intended…

vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-81736 | ISC BIND up to 9.21.25 Resolver resource consumption (Nessus ID 347971)

A vulnerability identified as problematic has been detected in ISC BIND up to 9.18.50/9.18.50-S1/9.20.27/9.20.27-S1/9.21.25.

🛡️ CVE-2026-81736
vor 2 Tagen 1 Min
0
Weiterlesen ↗
VulDB UpdatesCVE-2026-81563 | ISC BIND up to 9.21.24 Resolver resource consumption (Nessus ID 347971)vor 2 Tagen
Sicherheitslücken (CVE) InfoWorld
A zero-click RCE flaw in AI coding agents could have exposed enterprise systems

Popular AI coding agents such as OpenAI’s Codex, Anthropic’s Claude Code, Google’s Gemini CLI, and Microsoft-owned GitHub Copilot were vulnerable to…

vor 2 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) IT Security News
Unbound 1.26.1 Patches Critical RCE, DoS, and DNSSEC Flaws

  A major security update has been issued for Unbound, the widely used validating DNS resolver developed by NLnet Labs.

IT Security Nachrichten 65%
vor 2 Tagen 1 Min
0
Weiterlesen ↗
Weitere 36 Beiträge laden
Seite 1 von 6 • Gesamt: 195 Artikel
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Sicherheitslücken (CVE) 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken