🛡️ Sicherheitslücken (CVE) – Cybersecurity News & Diskussionsportal

Cybersecurity News & Diskussionsportal

⚡ tsecurity.de Intelligence

Alle (405.005) 🚨 0-Days & KEV 📺 Videos Podcasts 🐙 Tools

Hersteller: Alle Hersteller Microsoft Linux / Kernel Apple Cisco Google Fortinet

Sicherheitslücken (CVE) 🛡️ Security Fix Cyber Security Advisories

A Vulnerability in GitLab Could Allow for Disclosure of Sensitive Data

A vulnerability has been discovered in GitLab, which could allow disclosure of sensitive data.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ Security Fix

Security Weekly - A CRA Resource: Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228

Vulnerability management isn’t just about finding more vulnerabilities—it’s about knowing what matters…

vor 3 Tagen 4 Views

Weiterlesen ↗

Sicherheitslücken (CVE) LWN.net

Emacs arbitrary code execution flaw

Sean Whitton has announced that the original fix for an arbitrary code execution flaw in Emacs (CVE-2024-53920) was incomplete.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-90961 VulDB Updates

CVE-2026-90961 | MISP up to 2.5.45 LdapAuth/LinOTPAuth _checkFields email/password hard-coded password (0ee058548 / EUVD-2026-77473)

A vulnerability labeled as critical has been found in MISP up to 2.5.45.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-84179 VulDB Updates

CVE-2026-84179 | Apache Storm Topology Page information disclosure (EUVD-2026-77482)

A vulnerability classified as problematic has been found in Apache Storm. The affected element is an unknown function of the component Topology Page.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-90940 VulDB Updates

CVE-2026-90940 | novel-plus up to 5.3.3 CacheController CacheController.refreshCache default password (EUVD-2026-77484)

A vulnerability was found in novel-plus up to 5.3.3. It has been classified as problematic. This impacts the function CacheController.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-90939 VulDB Updates

CVE-2026-90939 | novel-plus up to 5.3.3 /sys/user/list information disclosure (EUVD-2026-77483)

A vulnerability was found in novel-plus up to 5.3.3 and classified as problematic. This affects an unknown function of the file /sys/user/list.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-90957 VulDB Updates

CVE-2026-90957 | CIRCL MISP up to 2.5.45 SVG image cross site scripting (EUVD-2026-77467)

A vulnerability marked as problematic has been reported in CIRCL MISP up to 2.5.45.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-82920 VulDB Updates

CVE-2026-82920 | Mattermost up to 11.7.7/11.8.4/11.9.0 access_control_policies access control (EUVD-2026-77487)

A vulnerability has been found in Mattermost up to 11.7.7/11.8.4/11.9.0 and classified as problematic.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-90941 VulDB Updates

CVE-2026-90941 | novel-plus up to 5.3.3 BookController bookId/bookName authorization (EUVD-2026-77485)

A vulnerability, which was classified as problematic, has been found in novel-plus up to 5.3.3.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-82441 VulDB Updates

CVE-2026-82441 | Apache Storm Nimbus up to 3.0.x input validation (EUVD-2026-77486)

A vulnerability classified as very critical was found in Apache Storm Nimbus up to 3.0.x.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-90788 VulDB Updates

CVE-2026-90788 | magicblack MacCMS10 2026.1000.4055 Template .%40template%40default%40html%40label.html os command injection (Issue 1378 / EUVD-2026-77489)

A vulnerability identified as problematic has been detected in magicblack MacCMS10 2026.1000.4055.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ Security Fix Cyber Security News

AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions

A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and…

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) KitPloit

Exploits + Shellcode + GHDB v2026-09-12

Curated archive of public exploits, shellcode, and papers with SearchSploit CLI for offline searching, CVE lookup, and Nmap integration.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) eSecurity Planet

OpenAI Agents Linked to 2,000 RubyGems Packages, Alleged RubyDoc RCE

Researchers have linked internal OpenAI agents to a May campaign that flooded RubyGems with malicious packages and allegedly used RubyDoc.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Cybersecurity Dive

Malicious actors already using critical GitLab flaw, CISA and others warn

The vulnerability could let unauthenticated users access sensitive files from software-development environments.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) theregister.com

Perfect-10 GitLab bug under attack days after patch lands

CISA says attackers are exploiting a maximum-severity GitLab flaw that lets unauthenticated miscreants read arbitrary files from vulnerable servers…

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) infosecurity-magazine.com

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

KI-Ära im Security-Validation: CVSS reicht nicht mehr

LONDON (IT BOLTWISE) – In der ersten Hälfte 2026 wurden 35.853 CVEs veröffentlicht, während nur 495 davon als bereits ausgenutzt galten.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ CVE-2026-85706 «Hacker News» 🗞️🦾 IT BOLTWI…

GitLab warnt nach „In-the-wild“-Hinweisen vor Path-Traversal (CVE-2026-85706)

LONDON (IT BOLTWISE) – Hinweise auf „In-the-wild“-Ausnutzung rücken eine GitLab-Schwachstelle mit maximaler Kritikalität in den Fokus.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE)

GitHub: Open Source Friday: Securing JavaScript Projects with CVE Lite CLI

CVE Lite CLI is a fast, local dependency vulnerability scanner for JavaScript and TypeScript projects. It supports npm, pnpm…

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ Security Fix Ubuntu security notices

USN-8757-1: cgit vulnerability

It was discovered that cgit incorrectly handled repository paths when HTTP cloning was enabled.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Computerworld

September Patch Tuesday: 963 CVEs, 2 exploited flaws, 1 message

Microsoft’s September 2026 Patch Tuesday is the year’s largest release, with 963 CVEs requiring customer action, 106 rated critical.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ Security Fix Ubuntu security notices

USN-8756-1: Yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ Security Fix Ubuntu security notices

USN-8755-1: libvips vulnerability

It was discovered that libvips incorrectly handled specially crafted TIFF images when saving them as HEIF images.

vor 3 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) 🛡️ Security Fix Ubuntu security notices

USN-8754-1: Freeciv vulnerability

It was discovered that Freeciv incorrectly handled certain network packets, resulting in a stack overflow.

vor 3 Tagen 1 Min

Weiterlesen ↗