EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2025-9897 | AP Background Plugin up to 3.8.2 on WordPress advParallaxBackAdminSaveSlider cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11291 | ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 HTTP GET Request /map.php trid cross site scripting (EUVD-2025-32458)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10746 | Integrate Dynamics 365 CRM Plugin up to 1.0.9 on WordPress Configuration authorization (EUVD-2025-32421)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10729 | Qt up to 6.8.4/6.9.2 Node Parser use after free (Nessus ID 270732 / WID-SEC-2025-2205)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9892 | Restrict User Registration Plugin up to 1.0.1 on WordPress Setting update cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9286 | Appy Pie Connect for WooCommerce Plugin up to 1.1.2 on WordPress REST reset_user_password authorization(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-59759 | AndSoft e-TMS 25.03 URL LOGINFRM_DELCROIX.ASP l/demo/demo2/TNTLOGIN/UO/SuppConn cross site scripting(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11297 | Belkin F9K1015 1.00.10 /goform/formSetLanguage webpage buffer overflow (EUVD-2025-32462)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11300 | Belkin F9K1015 1.00.10 /goform/formWlanMP ateFunc buffer overflow (EUVD-2025-32466)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11402 | SourceCodester Hotel and Lodge Management System 1.0 /del_curr.php id sql injection(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9897 | AP Background Plugin up to 3.8.2 on WordPress advParallaxBackAdminSaveSlider cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11291 | ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 HTTP GET Request /map.php trid cross site scripting (EUVD-2025-32458)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10746 | Integrate Dynamics 365 CRM Plugin up to 1.0.9 on WordPress Configuration authorization (EUVD-2025-32421)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10729 | Qt up to 6.8.4/6.9.2 Node Parser use after free (Nessus ID 270732 / WID-SEC-2025-2205)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9892 | Restrict User Registration Plugin up to 1.0.1 on WordPress Setting update cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9286 | Appy Pie Connect for WooCommerce Plugin up to 1.1.2 on WordPress REST reset_user_password authorization(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-59759 | AndSoft e-TMS 25.03 URL LOGINFRM_DELCROIX.ASP l/demo/demo2/TNTLOGIN/UO/SuppConn cross site scripting(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11297 | Belkin F9K1015 1.00.10 /goform/formSetLanguage webpage buffer overflow (EUVD-2025-32462)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11300 | Belkin F9K1015 1.00.10 /goform/formWlanMP ateFunc buffer overflow (EUVD-2025-32466)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11402 | SourceCodester Hotel and Lodge Management System 1.0 /del_curr.php id sql injection(03.10.2026 um 02:23 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
Sicherheitslücken (CVE) (13)

Sicherheitslücken (CVE)

Spezifische Bereiche: Alle Sicherheitslücken (CVE) (13) Proof of Concept (PoC) ↗ Video Analysen ↗
LIVE …
13 Meldungen 1 aktiv
Aktiv: Vektor: PoC & Exploit Code Zurücksetzen
Alle (13) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
13 Meldungen
Plattformweite Suche ↗

Cyber Threat Intelligence & Forensik

ATT&CK-Taktiken über die sichtbaren Meldungen dieser Kategorie
MITRE ATT&CK HEATMAP 3 von 6 Meldungen kartiert
Live TTP Radar (Klick filtert Ansicht)
Initial Access 2
Privilege Escalation 1
MITRE ATT&CK Matrix Navigator
Enterprise-Matrix · nur belegte Techniken
14 Taktiken
2 belegte Techniken
T1068TA0004 · Privilege Escalation
Exploitation for Privilege Escalation
Mitigation: M1026 Privileged Account Management & Patching
Quelle: Kontext-Klassifikation des Artikeltextes
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
Nur belegte ATT&CK-Techniken werden kartiert — Taktiken ohne Beleg bleiben unausgefüllt.Enterprise Matrix v14.1

Heute

Sicherheitslücken (CVE) Security Affairs

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S.

KEV ACTIVE Cloud & IT-Enterprise
vor 2 Std. 1 Min
0
Weiterlesen
CyberInsiderFortiMail zero-day exploited in attacks as CISA urges immediate patchingvor 7 Std.Cyber Security NewsZammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Accessvor 12 Std.Security AffairsU.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalogvor 19 Std.

Gestern

Sicherheitslücken (CVE) Cyber Security News

PS5 Relapse Jailbreak Uses WebKit and Kernel Exploit to Gain Read/Write Access

A newly published proof-of-concept called Relapse-Exploit targets PlayStation 5 consoles running firmware versions 7.00 through 13.

TA0004 · T1068
vor 12 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) theregister.com

Fortinet sounds the alarm over actively exploited FortiMail zero-day

Fortinet is warning customers to lock down FortiMail after attackers started exploiting a critical bug that lets them write files to vulnerable…

🛡️ Security Fix KEV ACTIVE TA0001 · T1190
vor 14 Std. 1 Min
0
Weiterlesen
Help Net SecurityCritical FortiMail zero-day exploited in the wild (CVE-2026-104286)vor 16 Std.SecurityWeekExploited Fortinet FortiMail Zero-Day Calls for Urgent Actionvor 16 Std.The Hacker NewsCritical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writesvor 19 Std.BleepingComputerFortinet warns of critical FortiMail flaw exploited in zero-day attacksvor 1 Tag
Sicherheitslücken (CVE) infosecurity-magazine.com

Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

🛡️ Security Fix
vor 16 Std. 1 Min
0
Weiterlesen

Diese Woche

Sicherheitslücken (CVE) theregister.com

Microsoft catches hackers exploiting Zimbra bug before disclosure

Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid…

KEV ACTIVE EPSS 11.7% TA0001 · T1190
vor 1 Tag 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) infosecurity-magazine.com

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

🛡️ Security Fix TA0001 · T1190
vor 1 Tag 1 Min
0
Weiterlesen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Sicherheitslücken (CVE) 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
LIVE VECTOR
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken