Web Security TippsNew manual calculation setting in Google Sheets(21.09.2026 um 20:54 Uhr)
Videos & KonferenzenTechquickie: The Steam Frame Shouldn't Work - Here's Why It Does(21.09.2026 um 21:17 Uhr)
Sichere ProgrammierungHow to Build a Production-Ready iOS App With AI-Generated Code(21.09.2026 um 21:00 Uhr)
Sichere ProgrammierungAfriex Integrations: Sandbox, Idempotency, and Webhook Simulation(21.09.2026 um 21:50 Uhr)
Sichere ProgrammierungBridging Local and Cloud Databases for Centralized Data Management(21.09.2026 um 21:51 Uhr)
Web Security TippsNew manual calculation setting in Google Sheets(21.09.2026 um 20:54 Uhr)
Videos & KonferenzenTechquickie: The Steam Frame Shouldn't Work - Here's Why It Does(21.09.2026 um 21:17 Uhr)
Sichere ProgrammierungHow to Build a Production-Ready iOS App With AI-Generated Code(21.09.2026 um 21:00 Uhr)
Sichere ProgrammierungAfriex Integrations: Sandbox, Idempotency, and Webhook Simulation(21.09.2026 um 21:50 Uhr)
Sichere ProgrammierungBridging Local and Cloud Databases for Centralized Data Management(21.09.2026 um 21:51 Uhr)
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence

Sicherheitslücken (CVE)

Sicherheitslücken (CVE) Cyber Security News
Hackers Exploit Marimo RCE to Steal AWS Credentials and Reach Bastion Host in 8 Seconds

Threat actors have been observed exploiting a critical remote code execution vulnerability in the Marimo notebook platform to steal AWS credentials…

vor 6 Tagen 1 Min
0
Weiterlesen ↗
Cyber Security NewsMarimo RCE Flaw Lets Hackers Steal AWS Credentials and Pivot to Bastion Host in 8 Secondsvor 6 TagenCyber Security NewsCritical AWS Flaw Lets Attackers Bypass Port Forwarding Restrictions and Steal IAM Credentialsvor 7 Tagen
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-91004 | SourceCodester Online Faculty Clearance System 1.0 /delete_faculty1.php ID sql injection (EUVD-2026-78283)

A vulnerability categorized as critical has been discovered in SourceCodester Online Faculty Clearance System 1.0.

vor 6 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) IT Security News
Attackers Actively Exploiting Critical Vulnerability in WooCommerce Wholesale Lead Capture Plugin

On February 20th, 2026, a critical Unauthenticated Arbitrary File Upload vulnerability was publicly disclosed in WooCommerce Wholesale Lead Capture…

🛡️ Security Fix
vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-90597 | itsourcecode Sales and Inventory System 1.0 /pages/sup_edit1.php ID sql injection (EUVD-2026-77127)

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. It has been declared as critical.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-90584 | TooTallNate Java-WebSocket up to 1.6.1 Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources (Issue 1508 / EUVD-2026-77090)

A vulnerability labeled as problematic has been found in TooTallNate Java-WebSocket up to 1.6.1.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…
Red Heron nutzt Gitea-RCE und Rootkit SIXZUT für 13 kompromittierte Ziele

LONDON (IT BOLTWISE) – Ein mutmaßlich China-gebundenes Akteurscluster soll eine neu offengelegte Schwachstelle in Gitea (CVE-2026-60004) schnell zu…

vor 7 Tagen 1 Min
0
Weiterlesen ↗
The Hacker NewsRed Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countriesvor 7 Tagen
Sicherheitslücken (CVE) IT Security News
Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin

On August 21 and August 22, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, identified two independent critical…

🛡️ Security Fix
vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-85979 | Perforce Puppet Enterprise up to 2023.8.10/2025.11.2 java_keystore_passwd command injection (WID-SEC-2026-3342)

A vulnerability labeled as very critical has been found in Perforce Puppet Enterprise up to 2023.8.10/2025.11.2. Impacted is an unknown function.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) eSecurity Planet
OpenAI Agents Linked to 2,000 RubyGems Packages, Alleged RubyDoc RCE

Researchers have linked internal OpenAI agents to a May campaign that flooded RubyGems with malicious packages and allegedly used RubyDoc.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) Cybersecurity Dive
Malicious actors already using critical GitLab flaw, CISA and others warn

The vulnerability could let unauthenticated users access sensitive files from software-development environments.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) infosecurity-magazine.com
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE)
GitHub: Open Source Friday: Securing JavaScript Projects with CVE Lite CLI

CVE Lite CLI is a fast, local dependency vulnerability scanner for JavaScript and TypeScript projects. It supports npm, pnpm…

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-14298 | Mattermost up to 11.9.x Boards Archive Import allocation of resources

A vulnerability labeled as problematic has been found in Mattermost up to 10.11.22/11.7.7/11.8.4/11.9.0/11.9.x.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) VulDB Updates
CVE-2026-85664 | chroma-core Chroma up to 1.5.9 HNSW Index max_neighbors/ef_construction/ef_search allocation of resources

A vulnerability, which was classified as problematic, was found in chroma-core Chroma up to 1.5.9.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) Rapid7 Cybersecurity Blog
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

OverviewOn September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterprise Edition (EE).

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) Cyber Security News
Critical vBulletin Pre-Auth RCE Flaw Enables Arbitrary PHP Code Execution

A critical vulnerability in vBulletin lets unauthenticated remote attackers execute arbitrary PHP code on a vulnerable forum server, creating a…

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) Security Affairs
Dutch NCSC Warns: Critical Check Point VPN Flaws Put Networks at Risk

Two critical Check Point VPN flaws score 9.8 and could enable remote code execution. Patch now and restrict VPN access before exploitation begins.

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Cyber Security NewsCritical Check Point VPN Flaws Could Face Large-Scale Exploitation, NCSC Warnsvor 7 Tagen
Sicherheitslücken (CVE) Cyber Security News
GitHub Pays $100,000 Bounty for Critical RCE Flaw in Git Push Pipeline

GitHub has awarded security researcher Saif Ghani a $100,000 bug bounty after the disclosure of CVE-2026-3854, a critical remote code execution…

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Cyber Security NewsGitHub Pays $100,000 Bounty for Critical RCE Flaw Triggered by a Single Git Pushvor 7 Tagen
Sicherheitslücken (CVE) GBHackers Security
China-Linked Hackers Exploit Sogou One-Click RCE to Deploy GRAYRABBIT Backdoor

China-linked threat actors tracked as UNC3569 have exploited a critical one-click remote code execution vulnerability in Tencent’s Sogou Input Method…

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Sicherheitslücken (CVE) BSI Warn- und Informationsd…
[UPDATE] [kritisch] Budibase: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen…

vor 7 Tagen 1 Min
0
Weiterlesen ↗
Weitere 36 Beiträge laden
Seite 5 von 6 • Gesamt: 184 Artikel
Threat Hunter Status-Update verfassen
Community Stream
News-Deck Sicherheitslücken (CVE) 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting