EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2025-9897 | AP Background Plugin up to 3.8.2 on WordPress advParallaxBackAdminSaveSlider cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11291 | ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 HTTP GET Request /map.php trid cross site scripting (EUVD-2025-32458)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10746 | Integrate Dynamics 365 CRM Plugin up to 1.0.9 on WordPress Configuration authorization (EUVD-2025-32421)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10729 | Qt up to 6.8.4/6.9.2 Node Parser use after free (Nessus ID 270732 / WID-SEC-2025-2205)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9892 | Restrict User Registration Plugin up to 1.0.1 on WordPress Setting update cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9286 | Appy Pie Connect for WooCommerce Plugin up to 1.1.2 on WordPress REST reset_user_password authorization(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-59759 | AndSoft e-TMS 25.03 URL LOGINFRM_DELCROIX.ASP l/demo/demo2/TNTLOGIN/UO/SuppConn cross site scripting(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11297 | Belkin F9K1015 1.00.10 /goform/formSetLanguage webpage buffer overflow (EUVD-2025-32462)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11300 | Belkin F9K1015 1.00.10 /goform/formWlanMP ateFunc buffer overflow (EUVD-2025-32466)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11402 | SourceCodester Hotel and Lodge Management System 1.0 /del_curr.php id sql injection(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9897 | AP Background Plugin up to 3.8.2 on WordPress advParallaxBackAdminSaveSlider cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11291 | ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 HTTP GET Request /map.php trid cross site scripting (EUVD-2025-32458)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10746 | Integrate Dynamics 365 CRM Plugin up to 1.0.9 on WordPress Configuration authorization (EUVD-2025-32421)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-10729 | Qt up to 6.8.4/6.9.2 Node Parser use after free (Nessus ID 270732 / WID-SEC-2025-2205)(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9892 | Restrict User Registration Plugin up to 1.0.1 on WordPress Setting update cross-site request forgery(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-9286 | Appy Pie Connect for WooCommerce Plugin up to 1.1.2 on WordPress REST reset_user_password authorization(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-59759 | AndSoft e-TMS 25.03 URL LOGINFRM_DELCROIX.ASP l/demo/demo2/TNTLOGIN/UO/SuppConn cross site scripting(03.10.2026 um 02:01 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11297 | Belkin F9K1015 1.00.10 /goform/formSetLanguage webpage buffer overflow (EUVD-2025-32462)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11300 | Belkin F9K1015 1.00.10 /goform/formWlanMP ateFunc buffer overflow (EUVD-2025-32466)(03.10.2026 um 02:23 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-11402 | SourceCodester Hotel and Lodge Management System 1.0 /del_curr.php id sql injection(03.10.2026 um 02:23 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
Proof of Concept (PoC) (30312)

Proof of Concept (PoC)

LIVE …
30.312 Meldungen
Alle (30.312) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
30.312 Meldungen
Plattformweite Suche ↗

Cyber Threat Intelligence & Forensik

ATT&CK-Taktiken über die sichtbaren Meldungen dieser Kategorie
MITRE ATT&CK HEATMAP 4 von 15 Meldungen kartiert
Live TTP Radar (Klick filtert Ansicht)
Initial Access 4
MITRE ATT&CK Matrix Navigator
Enterprise-Matrix · nur belegte Techniken
14 Taktiken
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
Nur belegte ATT&CK-Techniken werden kartiert — Taktiken ohne Beleg bleiben unausgefüllt.Enterprise Matrix v14.1

Älter

Proof of Concept (PoC) 0day.today

#0daytoday #Jorani Leave Management System 1.0.2 Host Header Injection Vulnerability [#0day #Exploit]

🛡️ Security Fix
vor 2 Jahren 1 Min
0
Weiterlesen
0day.today#0daytoday #Php travel agency system 1.0 by oretnom23 Multiple SQL injection Vulnerabilities [#0day #Exploit]vor 2 Jahren
Proof of Concept (PoC) 0day.today

#0daytoday #Shuttle Booking Software 2.0 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

🛡️ Security Fix
vor 2 Jahren 1 Min
0
Weiterlesen
0day.today#0daytoday #PHPJabbers Availability Booking Calendar 5.0 CSV Injection Vulnerability [#0day #Exploit]vor 2 Jahren0day.today#0daytoday #PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting Vulnerability [#0day #Exploit]vor 2 Jahren
Proof of Concept (PoC) 0day.today

#0daytoday #FireBear Improved Import And Export 3.8.6 XSLT Server Side Injection Exploit [#0day #Exploit]

vor 2 Jahren 1 Min
0
Weiterlesen
0day.today#0daytoday #Magento 2.4.6 XSLT Server Side Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]vor 2 Jahren0day.today#0daytoday #Magento 2.4.6 XSLT Server Side Injection / Command Execution Vulnerability [#0day #Exploit]vor 2 Jahren
Proof of Concept (PoC) 0day.today

#0daytoday #Click Stocks 1.3 - File Upload Remote Code Execution Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

🛡️ Security Fix TA0001 · T1190
vor 2 Jahren 1 Min
0
Weiterlesen
0day.today#0daytoday #TP-Link ER605 Unauthent LAN-side Remote Code Execution Exploit [remote #exploits #0day #Exploit]vor 2 Jahren0day.today#0daytoday #MagnusBilling Remote Command Execution Exploit CVE-2023-30258 [remote #exploits #0day #Exploit]vor 2 Jahren0day.today#0daytoday #ZoneMinder Snapshots Command Injection Exploit CVE-2023-26035 [remote #exploits #0day #Exploit]vor 2 Jahren0day.today#0daytoday #WordPress WP Rocket 2.10.3 Local File Inclusion Exploit [webapps #exploits #0day #Exploit]vor 2 Jahrenpacketstormsecurity.comF5 BIG-IP TMUI Directory Traversal / File Upload / Code Executionvor 2 Jahren
Proof of Concept (PoC) packetstormsecurity.com

Magento 2.4.6 XSLT Server Side Injection / Command Execution

Magento version 2.4.6 suffers from an XSLT server side injection vulnerability that allows for remote command execution.

vor 2 Jahren 1 Min
0
Weiterlesen
packetstormsecurity.comZoneMinder Snapshots Command Injectionvor 2 Jahren
Proof of Concept (PoC) packetstormsecurity.com

EzViz Studio 2.2.0 DLL Hijacking

EzViz Studio version 2.2.0 suffers from a dll hijacking vulnerability.

vor 2 Jahren 1 Min
0
Weiterlesen
Proof of Concept (PoC) packetstormsecurity.com

Another Bunch Of Fixes For Microsoft Security Bugs Exploited In The Wild

vor 2 Jahren 1 Min
0
Weiterlesen
Proof of Concept (PoC) 0day.today

#0daytoday #WordPress Contact Form To Any API 1.1.2 SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

🛡️ Security Fix TA0001 · T1190
vor 2 Jahren 1 Min
0
Weiterlesen
0day.today#0daytoday #Elementor Website Builder < 3.12.2 SQL injection Exploit [webapps #exploits #0day #Exploit]vor 2 Jahrenpacketstormsecurity.comWordPress Contact Form To Any API 1.1.2 SQL Injectionvor 2 Jahren0day.today#0daytoday #Penglead 2.0 Multiple SQL injection Vulnerabilities [webapps #exploits #Vulnerabilities #0day #Exploit]vor 2 Jahren0day.today#0daytoday #Penglead 2.0 SQL injection Bypass Authentication Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]vor 2 Jahren
Proof of Concept (PoC) 0day.today

#0daytoday #LOYTEC Electronics Insecure Transit / Insecure Permissions / Unauthenticated Access Vul [#0day #Exploit]

KRITIS / Energie
vor 2 Jahren 1 Min
0
Weiterlesen
packetstormsecurity.comLOYTEC Electronics Insecure Transit / Insecure Permissions / Unauthenticated Accessvor 2 Jahren
Proof of Concept (PoC) packetstormsecurity.com

AjaxPro Deserialization Remote Code Execution

This Metasploit module leverages an insecure deserialization of data to get remote code execution on the target OS in the context of the user running…

TA0001 · T1190
vor 2 Jahren 1 Min
0
Weiterlesen
packetstormsecurity.comApache ActiveMQ Unauthenticated Remote Code Executionvor 2 Jahrenpacketstormsecurity.comCisco IOX XE Unauthenticated Remote Code Executionvor 2 Jahrenpacketstormsecurity.comF5 BIG-IP TMUI AJP Smuggling Remote Command Executionvor 2 Jahrenpacketstormsecurity.comMagnusBilling Remote Command Executionvor 2 Jahren
Proof of Concept (PoC) packetstormsecurity.com

mtk-jpeg Driver Out-Of-Bounds Read / Write

An out-of-bounds read / write due to missing bounds check in the mtk-jpeg driver can lead to memory corruption and potential escalation of privileges.

vor 2 Jahren 1 Min
0
Weiterlesen
packetstormsecurity.comAndroid mtk_jpeg Driver Race Condition / Privilege Escalationvor 2 Jahren
Proof of Concept (PoC) packetstormsecurity.com

Maxima Max Pro Power 1.0 486A BLE Traffic Replay

Maxima Max Pro Power with firmware version 1.0 486A suffers from a BLE traffic replay vulnerability that allows for arbitrary unauthorized actions.

vor 2 Jahren 1 Min
0
Weiterlesen
Proof of Concept (PoC) packetstormsecurity.com

Windows Kernel Containerized Registry Escape

The Microsoft Windows kernel suffers from a containerized registry escape through integer overflows in VrpBuildKeyPath and other weaknesses.

Windows Tipps & Security 75%
vor 2 Jahren 1 Min
0
Weiterlesen
Proof of Concept (PoC) packetstormsecurity.com

Penglead 2.0 SQL Injection

Penglead version 2.0 suffers from a remote SQL Injection vulnerability that allows for authentication bypass.

TA0001 · T1190
vor 2 Jahren 1 Min
0
Weiterlesen
Proof of Concept (PoC) packetstormsecurity.com

EnBw SENEC Legacy Storage Box Information Disclosure

EnBw SENEC Legacy Storage Box versions 1 through 3 suffer from a log disclosure vulnerability.

vor 2 Jahren 1 Min
0
Weiterlesen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Proof of Concept (PoC) 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
LIVE VECTOR
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken