EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
Podcasts & Audio Briefings9to5Google: This could change Android gaming forever.(05.11.2026 um 17:45 Uhr)
•
YouTube Security VideosVivo X500 Pro Max im Test-Fazit: Schlechter als der Vorgänger?! | CHIP(05.11.2026 um 18:30 Uhr)
•
YouTube Security VideosLinus Tech Tips: “Tesla Hater” Finally Tries Full Self Driving(05.11.2026 um 18:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: 3 ways to design tour agentic system(05.11.2026 um 18:00 Uhr)
•
YouTube Security VideosCOMPUTER BILD: Bluetooth HDT: neuer Standard kommt(05.11.2026 um 17:00 Uhr)
•
YouTube Security VideosAndroid Developers: Google Play PolicyBytes - October 2026 policy updates(05.11.2026 um 18:04 Uhr)
•
YouTube Security VideosChrome for Developers: Modern Web Guidance: Interactive content in 3D scenes(05.11.2026 um 18:00 Uhr)
•
YouTube Security VideosMicrosoft Developer: 52% More Throughput. 1.5x Better Value. The Azure SQL DB Hyperscale Advantage | Data Exposed(05.11.2026 um 18:00 Uhr)
•
IT NachrichtenWindows 11, Microsoft Edge Get a New Discover Feed Experience(05.11.2026 um 18:57 Uhr)
•
Windows Tipps & SecurityMicrosoft Teams can now transcribe your swear words exactly as you said them(05.11.2026 um 16:52 Uhr)
•
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
Podcasts & Audio Briefings9to5Google: This could change Android gaming forever.(05.11.2026 um 17:45 Uhr)
•
YouTube Security VideosVivo X500 Pro Max im Test-Fazit: Schlechter als der Vorgänger?! | CHIP(05.11.2026 um 18:30 Uhr)
•
YouTube Security VideosLinus Tech Tips: “Tesla Hater” Finally Tries Full Self Driving(05.11.2026 um 18:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: 3 ways to design tour agentic system(05.11.2026 um 18:00 Uhr)
•
YouTube Security VideosCOMPUTER BILD: Bluetooth HDT: neuer Standard kommt(05.11.2026 um 17:00 Uhr)
•
YouTube Security VideosAndroid Developers: Google Play PolicyBytes - October 2026 policy updates(05.11.2026 um 18:04 Uhr)
•
YouTube Security VideosChrome for Developers: Modern Web Guidance: Interactive content in 3D scenes(05.11.2026 um 18:00 Uhr)
•
YouTube Security VideosMicrosoft Developer: 52% More Throughput. 1.5x Better Value. The Azure SQL DB Hyperscale Advantage | Data Exposed(05.11.2026 um 18:00 Uhr)
•
IT NachrichtenWindows 11, Microsoft Edge Get a New Discover Feed Experience(05.11.2026 um 18:57 Uhr)
•
Windows Tipps & SecurityMicrosoft Teams can now transcribe your swear words exactly as you said them(05.11.2026 um 16:52 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence

Cybersecurity News & IT-Sicherheit

1.001 Meldungen
LIVE …
Alle (1.001) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
1.001 Meldungen
Plattformweite Suche ↗

Heute

IT Security Nachrichten ZDNET

The 5 best early phone deals live now: Samsung, Google and more

Black Friday is coming, and you can already snag deals on unlocked phones from Samsung, Google, and more.

Android Tipps & Security 75%
vor 15 Std. 1 Min
0
Weiterlesen
2 weitere Quellen
ZDNETvor 15 Std.The 5 best early phone deals live now: Samsung, Google and moreZDNETvor 15 Std.The 5 best early phone deals live now: Samsung, Google and more
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-65858 | Calibre-Web 0.6.25 /ajax/listusers username cross site scripting (EUVD-2025-200242)

A vulnerability identified as problematic has been detected in Calibre-Web 0.6.25.

🛡️ CVE-2025-65858 Low 3.5
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-65836 | PublicCMS 5.202506.b Chat Interface SimpleAiAdminController server-side request forgery

A vulnerability categorized as critical has been discovered in PublicCMS 5.202506.b.

🛡️ CVE-2025-65836 Critical 9.1
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-51683 | mJobtime 15.7.2 update_profile_Server sql injection

A vulnerability, which was classified as critical, has been found in mJobtime 15.7.2.

🛡️ CVE-2025-51683 Critical 9.8 TA0001 · T1190
vor 16 Std. 1 Min
0
Weiterlesen
AI & KI Nachrichten Artificial intelligence

China blocks SoftBank’s $5.4bn takeover of ABB’s robotics division

Swiss-Swedish company’s unit is focused on Chinese market and has mega-factory in Pudong

KRITIS / Energie Finanzwesen & Banking
vor 16 Std. 1 Min
0
Weiterlesen
AI & KI Nachrichten

Julian Goldie SEO: Hermes Agent Apollo Is Actually INSANE!

Want to make money and save time with AI? Join here: https://www.skool.com/ai-profit-lab-7462/about Video notes +…

vor 16 Std. 747 Views
0
Weiterlesen
AI & KI Nachrichten ComputerWeekly.com

OECD: AI compute now a strategic asset as UK bets £2bn

Venture capital for artificial intelligence firms in IT infrastructure and hosting rose from $54.5bn to $123.

Cloud & IT-Enterprise
vor 16 Std. 1 Min
0
Weiterlesen
Server Security ZDNET

I tried LordOS expecting another MacOS clone – then I opened its network monitor

This free Linux distro impressed me with easy tools for seeing which apps are connecting, where traffic is coming from, and what to block – in one…

vor 16 Std. 1 Min
0
Weiterlesen
3 weitere Quellen
ZDNETvor 16 Std.I tried LordOS expecting another MacOS clone – then I opened its network monitorZDNETvor 16 Std.I tried LordOS expecting another MacOS clone – then I opened its network monitorZDNETvor 16 Std.I tried LordOS expecting another MacOS clone – then I opened its network monitor
Apple iOS & macOS The Mac Observer

Apple Brings iPhone Duo StandBy Upgrades to Older iPhone Models

People who plug their phones in at night are getting a nice software treat this winter.

vor 16 Std. 1 Min
0
Weiterlesen
IT Security Nachrichten Network World

Attackers turned OpsShield’s trusted update channel into a supply-chain attack

The kinks in the software supply chain are once again being exposed, with attackers now targeting OpsShield’s update process.

Server Security 76%
vor 16 Std. 1 Min
0
Weiterlesen
Apple iOS & macOS The Mac Observer

Apple Announces A New Veterans Day Fitness Challenge For Users

Users who like to track their daily movement and exercise routines have another great reason to get active this month.

vor 16 Std. 1 Min
0
Weiterlesen
IT Nachrichten Latest from TechRadar

Harvard University reveals data breach exposed 851,000 accounts

Harvard breach data affecting 850,500 people has now surfaced in breach-tracking databases and dark web archivesExposed information includes emails…

TA0001 · T1566 KRITIS / Energie IT Security Nachrichten 74%
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-65403 | LightFTP 2.0 g_cfg.MaxUsers buffer overflow

A vulnerability classified as problematic has been found in LightFTP 2.0. Impacted is an unknown function of the component g_cfg.MaxUsers.

🛡️ CVE-2025-65403 Medium 6.5
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-63095 | Tempus Ex hello-video-codec 0.1.0 write_bits denial of service

A vulnerability was found in Tempus Ex hello-video-codec 0.1.0. It has been declared as problematic.

🛡️ CVE-2025-63095 Medium 6.5 TA0040 · T1498
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-64030 | Eximbills Enterprise 4.1.5 WSTrxManager TMPL_INFO cross site scripting

A vulnerability classified as problematic has been found in Eximbills Enterprise 4.1.5.

🛡️ CVE-2025-64030 Medium 5.4
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-57489 | Shirt Pocket SuperDuper 3.10 SDAgent access control

A vulnerability has been found in Shirt Pocket SuperDuper 3.10 and classified as critical.

🛡️ CVE-2025-57489 High 8.1
vor 16 Std. 1 Min
0
Weiterlesen
Sicherheitslücken (CVE) VulDB Updates

CVE-2025-63534 | Blood Bank Management System 1.0 login.php error cross site scripting

A vulnerability, which was classified as problematic, was found in Blood Bank Management System 1.0.

🛡️ CVE-2025-63534 High 8.5 Finanzwesen & Banking
vor 16 Std. 1 Min
0
Weiterlesen
2 weitere Quellen
VulDB Updatesvor 16 Std.CVE-2025-63535 | Blood Bank Management System 1.0 abs.php search sql injectionVulDB Updatesvor 16 Std.CVE-2025-63532 | Blood Bank Management System 1.0 cancel.php search sql injection
Apple iOS & macOS The Mac Observer

Apple Rolls Out Fresh Beta Firmware For Modern AirPods Models

Apple is giving testers another software update to try out. The company just released a new beta firmware build for several of its current AirPods…

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

Go Email Integration: How to Diagnose DKIM Verification Failures in 2026

For a developer tools service, resolve DKIM verification failures at the sending-domain boundary, and suppress a recipient only when the delivery…

vor 16 Std. 1 Min
0
Weiterlesen
Apple iOS & macOS The Mac Observer

Apple Allows Developers to Build Custom App Skills for Siri AI

Apple just announced a major update for its digital assistant, opening the doors for third-party developers to build custom integrations.

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

Fixing Serverless Function Timeouts When Polling YouTube Creator Analytics for D2C Campaigns

The Problem When building post-campaign influencer monitoring for Indian D2C brands at PulseROI, cron jobs fetching live YouTube creator engagement…

TA0003 · T1053 KRITIS / Energie
vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

reset() Inside onSubmit Only Half-Resets a React Hook Form. Here's What Stays Behind

You save a form, call reset() in your submit handler, and the inputs go blank. Looks done.

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

Building RapVideoGo with TanStack Start and Cloudflare: Beyond the AI API Call

An AI video product has a deceptively simple interface: upload a photo, describe an idea, and click Generate.

Cloud & IT-Enterprise
vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

Why I Built a Goal Tracker That Gets Smaller as You Make Progress

Most productivity tools are designed to help us capture more work.

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

Your CI Pipeline Never Re-Runs the Request That Proved the Bug

You already have the requests. You ran them once, found a bug, fixed it, and moved on.

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

Why I Built Lioratools: 100% Client-Side Web Utilities and How to Embed Them on Your Site

As developers, we often need minor micro-utilities throughout the day: formatting mixed text casings, generating random placeholder content…

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

I built my own password manager because I'm terrible at remembering passwords

Hey everyone! I've been working on a personal project called GoLock, a desktop password manager built with Go.

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

A bot loaded my CSS, ran my JS, and still wasn't human

My daily report has one job: tell me how many actual people visited. Not requests, not hits — people. For a while it said five.

vor 16 Std. 1 Min
0
Weiterlesen
Sichere Programmierung DEV Community

A snap-fit lives or dies on half a millimeter

A snap-fit that feels loose, or one that cannot be pressed home, is almost never a design mistake in the shape sense.

vor 16 Std. 1 Min
0
Weiterlesen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

Auto-Newslider · Slider
Wechsel alle
Sichtbare Karten

Automatischer Newslider: Pfeiltasten links und rechts blättern, Automatik pausiert bei Fokus und Wischgesten

Live-Signalstrom 0 Signale
Warte auf die ersten Signale …
Quellen-Ansicht 24 Quellen

Aggregiert über die letzten 14 Tage dieser Kategorie (inkl. Unterkategorien).

- Futurezone 251
Letzter Beitrag: 05.11.2026 um 18:00 Uhr
Meldungen zeigen (5)
Android - GIGA 223
Letzter Beitrag: 05.11.2026 um 17:43 Uhr
Meldungen zeigen (5)
Apfelpage 59
Letzter Beitrag: 05.11.2026 um 13:18 Uhr
AI - Ars Technica 27
Letzter Beitrag: 05.11.2026 um 13:00 Uhr
BASIC thinking 15
Letzter Beitrag: 02.11.2026 um 19:00 Uhr
AI Revolution 12
Letzter Beitrag: 05.11.2026 um 01:22 Uhr
RSS
AI News 11
Letzter Beitrag: 05.11.2026 um 10:45 Uhr
RSS
Apple Newsroom 9
Letzter Beitrag: 03.11.2026 um 19:24 Uhr
Alberta Tech 7
Letzter Beitrag: 04.11.2026 um 19:07 Uhr
RSS
Atlassian 7
Letzter Beitrag: 02.11.2026 um 19:35 Uhr
ANY.RUN's Cybersecurity Blog 6
Letzter Beitrag: 05.11.2026 um 10:34 Uhr
0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken