EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
YouTube Security VideosAMD: Leadership I/O for Agentic AI Workloads(05.11.2026 um 22:38 Uhr)
•
YouTube Security VideosMicrosoft Azure: Unlocking Media Archives with Agentic Intelligence | Support Partners(05.11.2026 um 22:00 Uhr)
•
YouTube Security VideosGoogle: Happy Hunger Games 🐍(05.11.2026 um 21:59 Uhr)
•
YouTube Security VideosGoogle Workspace: Video generation in Google Vids just leveled up 🎬 #Shorts(05.11.2026 um 23:08 Uhr)
•
Windows Tipps & SecurityMicrosoft is betting on native WinUI over web app slop across Windows 11, and even Color Picker and Text Extractor have moved to it in PowerToys(05.11.2026 um 22:00 Uhr)
•
Windows Tipps & SecurityTake a closer look at Discord's faster, lighter desktop app(05.11.2026 um 22:09 Uhr)
•
Windows ServerHoster Mittwald Opfer eines Cyberangriffs (5.11.2026)Borns IT - BornCity(05.11.2026 um 21:49 Uhr)
•
Windows ServerXbox Cloud Gaming: Nano-Controller funkt direkt zum Server - ComputerBase(05.11.2026 um 22:23 Uhr)
•
Windows ServerMicrosoft setzt KI ein, um mehr Windows-Sicherheitslücken zu schließen, während die Patch ...(05.11.2026 um 23:05 Uhr)
•
Web Security TippsGemini Omni 1.2 Flash now in Vids with 15-second generations and improved quality(05.11.2026 um 21:24 Uhr)
•
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
YouTube Security VideosAMD: Leadership I/O for Agentic AI Workloads(05.11.2026 um 22:38 Uhr)
•
YouTube Security VideosMicrosoft Azure: Unlocking Media Archives with Agentic Intelligence | Support Partners(05.11.2026 um 22:00 Uhr)
•
YouTube Security VideosGoogle: Happy Hunger Games 🐍(05.11.2026 um 21:59 Uhr)
•
YouTube Security VideosGoogle Workspace: Video generation in Google Vids just leveled up 🎬 #Shorts(05.11.2026 um 23:08 Uhr)
•
Windows Tipps & SecurityMicrosoft is betting on native WinUI over web app slop across Windows 11, and even Color Picker and Text Extractor have moved to it in PowerToys(05.11.2026 um 22:00 Uhr)
•
Windows Tipps & SecurityTake a closer look at Discord's faster, lighter desktop app(05.11.2026 um 22:09 Uhr)
•
Windows ServerHoster Mittwald Opfer eines Cyberangriffs (5.11.2026)Borns IT - BornCity(05.11.2026 um 21:49 Uhr)
•
Windows ServerXbox Cloud Gaming: Nano-Controller funkt direkt zum Server - ComputerBase(05.11.2026 um 22:23 Uhr)
•
Windows ServerMicrosoft setzt KI ein, um mehr Windows-Sicherheitslücken zu schließen, während die Patch ...(05.11.2026 um 23:05 Uhr)
•
Web Security TippsGemini Omni 1.2 Flash now in Vids with 15-second generations and improved quality(05.11.2026 um 21:24 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
29.233 Meldungen
LIVE …
Alle (29.233) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
Vektoren: Alle Vektoren Distro Updates Tech Kernel CVE Threat Paket-Updates Defense Container Runtime Tech eBPF & Kernel Dev Tech Server Härtung Defense
Aktionen: RSS Feed CTI SENTINEL: LIVE
29.233 Meldungen
Plattformweite Suche ↗

Heute

Unix & Linux Server DEV Community

Refmade Shipped Without Git: 2,764 Files in One Snapshot

On October 7 I asked an agent why Refmade was not on GitHub. The answer was short: it had never been in Git.

vor 1 Std. 1 Min
0
Weiterlesen
Unix & Linux Server

Faster wake-ups for idle Node.js applications on CloudLinux

Node.js applications on cPanel servers running CloudLinux can now wake from a snapshot, so the first visitor after a quiet period waits less. Node.

Cloud & IT-Enterprise
vor 7 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Ubuntu security notices

USN-9001-1: ca-certificates update

It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not…

vor 7 Std. 1 Min
0
Weiterlesen
Unix & Linux Server DistroWatch.com: News

Distribution Release: Omarchy 4.5.0

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. David Heinemeier Hansson has announced the release of Omarchy 4.5.

vor 8 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Ubuntu security notices

USN-8972-2: HAProxy regression

USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the update caused a regression when processing certain chunked requests.

vor 9 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Pro-Linux Security

Denial of Service in valkey (SUSE)

TA0040 · T1498
vor 10 Std. 1 Min
0
Weiterlesen
1 weitere Quelle
Pro-Linuxvor 23 Std.Security: Denial of Service in Twisted (Ubuntu)
Unix & Linux Server Pro-Linux Security

Mehrere Probleme in aws-efs-utils (SUSE)

Cloud & IT-Enterprise
vor 10 Std. 1 Min
0
Weiterlesen
2 weitere Quellen
Pro-Linux Securityvor 23 Std.Mehrere Probleme in tesseract (Red Hat)Pro-Linuxvor 2 TagenSecurity: Mehrere Probleme in PCRE2 (Ubuntu)
Unix & Linux Server It's FOSS

This Overlooked Linux mv Option Replaces Three Commands With One

Every Linux user has done the three-step dance at least once.

vor 12 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Tecmint: Linux Howtos, Tuto…

ls Command: Sort Directory Listings by Last Modified Date in Linux

The post ls Command: Sort Directory Listings by Last Modified Date in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .

vor 15 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Deepin Technology Community

(中文) 10月社区月报 | deepin25 安全更新 & 社区 7.3 内核尝鲜发布

Sorry, this entry is only available in 中文.

vor 16 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Deepin Technology Community

(中文) 应用商店 | 腾讯 Marvis 登陆 deepin，共建 AI 应用生态

Sorry, this entry is only available in 中文.

vor 17 Std. 1 Min
0
Weiterlesen
Unix & Linux Server DistroWatch.com: News

Distribution Release: NebiOS 10.3

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Sarp Mateson Foundation has announced the release of NebiOS 10.

vor 19 Std. 1 Min
0
Weiterlesen

Gestern

Unix & Linux Server Pro-Linux

Security: Mangelnde Eingabeprüfung in Squid (Ubuntu)

vor 23 Std. 1 Min
0
Weiterlesen
4 weitere Quellen
Pro-Linuxvor 1 TagSecurity: Mangelnde Rechteprüfung in jabberd2 (Ubuntu)Pro-Linuxvor 2 TagenSecurity: Mangelnde Eingabeprüfung in Apt-Cacher (Ubuntu)Pro-Linuxvor 2 TagenSecurity: Mangelnde Eingabeprüfung in CakePHP (Ubuntu)Pro-Linuxvor 2 TagenSecurity: Mangelnde Rechteprüfung in Gin (Ubuntu)
Unix & Linux Server Pro-Linux Security

Ausführen beliebiger Kommandos in APT (Ubuntu)

vor 23 Std. 1 Min
0
Weiterlesen
2 weitere Quellen
Pro-Linuxvor 2 TagenSecurity: Ausführen beliebiger Kommandos in feh (Ubuntu)Pro-Linuxvor 2 TagenSecurity: Ausführen beliebiger Kommandos in Shapelib (Ubuntu)
Unix & Linux Server Pro-Linux Security

Pufferüberlauf in brotli (SUSE)

vor 23 Std. 1 Min
0
Weiterlesen
Unix & Linux Server Pro-Linux Security

Fehlerhafte Zugriffsrechte in fuse-overlayfs (SUSE)

vor 23 Std. 1 Min
0
Weiterlesen
Unix & Linux Server DistroWatch.com: News

Distribution Release: ML4W OS 2.17

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Stephan Raabe has released ML4W OS 2.

vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server It's FOSS

Schools That Say No to Google’s AI Will Be Saying Goodbye to its Search Too

Google is switching off Gemini, Gemini Notebook, Gemini in Classroom, and Search for K-12 student accounts by default.

vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server It's FOSS

Linux 7.4’s Merge Window is Huge, and Linus Says it Might Not Just Be AI

The story starts when Linus Torvalds opened the Linux 7.4 merge window more than two weeks ago when he was headed out for his annual family vacation…

vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server CloudLinux

MAx Cache now works with W3 Total Cache: what hosts and site owners each do

W3 Total Cache sites on CloudLinux servers with cPanel can now have their cached pages sent directly by Apache or Nginx, so the server does less work…

Cloud & IT-Enterprise
vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server Pro-Linux Security

Zwei Probleme in Yaws (Ubuntu)

Cloud & IT-Enterprise
vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server Tecmint: Linux Howtos, Tuto…

PikaPods: Host Any Open-Source Apps Without a VPS Server

The post PikaPods: Host Any Open-Source Apps Without a VPS Server first appeared on Tecmint: Linux Howtos, Tutorials & Guides .

vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server Debian Security

DSA-6611-1 imagemagick - security update

Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead…

🛡️ Security Fix TA0040 · T1498
vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server Rocky Linux RSS Feed

Rocky Linux is pleased to announce Testrarc

Introducing Testrarc The goal of each Rocky Linux release is to be a binary compatible enterprise operating system that delivers a trusted platform…

vor 1 Tag 1 Min
0
Weiterlesen
Unix & Linux Server DistroWatch.com: News

BSD Release: NetBSD 11.1

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Nia Alarie has announced the release of the first update to the NetBSD 11.x series.

vor 1 Tag 1 Min
0
Weiterlesen

Diese Woche

Unix & Linux Server Linux Magazine News (path…

Linux 7.4 is "Much Healthier" Thanks to AI

At nearly 42 million lines, Linux 7.4 is the largest merge in the history of the kernel.

vor 2 Tagen 1 Min
0
Weiterlesen
Unix & Linux Server Pro-Linux

Security: Preisgabe von Informationen in Relax-and-Recover (Ubuntu)

vor 2 Tagen 1 Min
0
Weiterlesen
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck Unix & Linux Server 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

Auto-Newslider · Slider
Wechsel alle
Sichtbare Karten

Automatischer Newslider: Pfeiltasten links und rechts blättern, Automatik pausiert bei Fokus und Wischgesten

Live-Signalstrom 0 Signale
Warte auf die ersten Signale …
Quellen-Ansicht 18 Quellen

Aggregiert über die letzten 14 Tage dieser Kategorie (inkl. Unterkategorien).

Deepin Technology Community 7
Letzter Beitrag: 05.11.2026 um 06:59 Uhr
Meldungen zeigen (5)
0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken