/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:none;transition:none}}.ticker-track{animation:none!important}.ticker-content{cursor:default}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}} 🔒 USN-8627-1: Yelp vulnerability | Unix & Linux Server – TSECURITY.DE
EILMELDUNGEN LIVE
Apple iOS & macOSSunday Reboot: HomeView is an interesting smart home experiment(18.10.2026 um 22:04 Uhr)
•
Apple iOS & macOSApple Watch sleep apnea notifications reach China mainland after NMPA approval(18.10.2026 um 19:40 Uhr)
•
Apple iOS & macOSHow to fix an iPhone or Mac clock that misses the daylight saving change(18.10.2026 um 20:26 Uhr)
•
Apple iOS & macOSAppleCare+ for HomeView costs $24.99 a year, HomePod mini 2 $9.99(18.10.2026 um 21:09 Uhr)
•
Apple iOS & macOSApple’s developer documentation is now available in eight more languages(18.10.2026 um 22:00 Uhr)
•
Android Tipps & SecurityWer viele Bilder mit einem Android-Handy macht, muss diese Google-Regel kennen(18.10.2026 um 19:52 Uhr)
•
Android Tipps & SecurityGoogle löst ein großes Foto-Problem auf Android-Handys(18.10.2026 um 19:54 Uhr)
•
AI & KI NachrichtenA woman was arrested in Philly for blocking a delivery robot(18.10.2026 um 20:28 Uhr)
•
AI & KI NachrichtenDisney agrees to hire the majority of Character.AI’s workforce(18.10.2026 um 18:30 Uhr)
•
AI & KI NachrichtenEveryone’s watching the Elizabeth Holmes documentary ‘You Can See Everything’(18.10.2026 um 21:03 Uhr)
•
Apple iOS & macOSSunday Reboot: HomeView is an interesting smart home experiment(18.10.2026 um 22:04 Uhr)
•
Apple iOS & macOSApple Watch sleep apnea notifications reach China mainland after NMPA approval(18.10.2026 um 19:40 Uhr)
•
Apple iOS & macOSHow to fix an iPhone or Mac clock that misses the daylight saving change(18.10.2026 um 20:26 Uhr)
•
Apple iOS & macOSAppleCare+ for HomeView costs $24.99 a year, HomePod mini 2 $9.99(18.10.2026 um 21:09 Uhr)
•
Apple iOS & macOSApple’s developer documentation is now available in eight more languages(18.10.2026 um 22:00 Uhr)
•
Android Tipps & SecurityWer viele Bilder mit einem Android-Handy macht, muss diese Google-Regel kennen(18.10.2026 um 19:52 Uhr)
•
Android Tipps & SecurityGoogle löst ein großes Foto-Problem auf Android-Handys(18.10.2026 um 19:54 Uhr)
•
AI & KI NachrichtenA woman was arrested in Philly for blocking a delivery robot(18.10.2026 um 20:28 Uhr)
•
AI & KI NachrichtenDisney agrees to hire the majority of Character.AI’s workforce(18.10.2026 um 18:30 Uhr)
•
AI & KI NachrichtenEveryone’s watching the Elizabeth Holmes documentary ‘You Can See Everything’(18.10.2026 um 21:03 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

USN-8627-1: Yelp vulnerability

It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy. An attacker could trick a…

Unix & Linux Server ubuntu.com 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (ubuntu.com)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
It was discovered that Yelp incorrectly handled certain crafted help
documents due to an overly permissive Content Security Policy. An
attacker could trick a user into opening a specially crafted document,
possibly resulting in the disclosure of sensitive information.
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

40 Quellen
CVE-2022-0494 | Linux Kernel up to 5.17-rc4 scsi_ioctl.c scsi_ioctl information disclosure (Nessus ID 366938)
39 weitere Quellen
VulDB Updatesvor 5 Std.CVE-2026-80833 | Linux Kernel up to 7.2.2 sun8i-ss generate seed/slen use after free (Nessus ID 366919) VulDB Updatesvor 5 Std.CVE-2026-80834 | Linux Kernel sun8i-ce generate use after free (Nessus ID 366919) VulDB Updatesvor 4 Std.CVE-2026-80930 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 tpm_i2c_nuvoton i2c_nuvoton_wait_for_stat allocation of resources (Nessus ID 366919) VulDB Updatesvor 4 Std.CVE-2026-80938 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 mt7615 mt7615_suspend deadlock (Nessus ID 366919) VulDB Updatesvor 4 Std.CVE-2026-80941 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 rtw88 rtw_txq_push_skb memory leak (Nessus ID 366919) VulDB Updatesvor 4 Std.CVE-2026-80951 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 i3c svc master svc_i3c_master_handle_ibi out-of-bounds write (Nessus ID 366919)
+33
11 Quellen
CVE-2026-111888 | thorsten phpMyFAQ up to 4.1.8 /admin/api/news/update improper authorization (EUVD-2026-103331)
10 weitere Quellen
VulDB Updatesvor 6 Std.CVE-2026-109640 | Frappe ERPNext up to 16.21.x improper authorization (EUVD-2026-98031) VulDB Updatesvor 6 Std.CVE-2026-108642 | JeecgBoot up to 3.9.5 Announcement Send list SysAnnouncementSendController improper authorization (EUVD-2026-96581) VulDB Updatesvor 6 Std.CVE-2026-108637 | JeecgBoot up to 3.9.5 User Group Member Removal deleteUserGroupBatch groupId/userIds improper authorization (EUVD-2026-96576) VulDB Updatesvor 6 Std.CVE-2026-108632 | JeecgBoot up to 3.9.5 Department Permission Controller queryById SysDepartPermissionController.queryById id improper authorization (EUVD-2026-96571) VulDB Updatesvor 6 Std.CVE-2026-108667 | JeecgBoot up to 3.9.5 Revert Recycle Bin revertRecycleBin improper authorization (EUVD-2026-96606) VulDB Updatesvor 6 Std.CVE-2026-108662 | JeecgBoot up to 3.9.5 deleteTenantPackUser userId/packId improper authorization (EUVD-2026-96601)
+4
11 Quellen
CVE-2026-110026 | Tasty Recipes Lite Plugin up to 1.2.10 on WordPress authorization (EUVD-2026-103391)
10 weitere Quellen
VulDB Updatesvor 7 Std.CVE-2026-109937 | Otter Blocks Plugin up to 3.2.2 on WordPress redirect (EUVD-2026-103390) VulDB Updatesvor 7 Std.CVE-2026-110976 | AI Engine Plugin up to 3.7.8 on WordPress authorization (EUVD-2026-103398) VulDB Updatesvor 7 Std.CVE-2026-87844 | PickPlugins Product Designer for WooCommerce Plugin up to 1.0.40 on WordPress authorization (EUVD-2026-103389) VulDB Updatesvor 7 Std.CVE-2026-110070 | Modern Events Calendar Lite Plugin up to 7.36.3 on WordPress authorization (EUVD-2026-103397) VulDB Updatesvor 7 Std.CVE-2026-110069 | Modern Events Calendar Lite Plugin up to 7.36.x on WordPress information disclosure (EUVD-2026-103396) VulDB Updatesvor 7 Std.CVE-2026-110035 | Salon Booking System Plugin up to 10.31.10 on WordPress REST API Endpoint access control (EUVD-2026-103395)
+4

Mehr aus dieser Kategorie

Security: Zwei Probleme in libXtst (Slackware)
18.10.2026
Not Every Open Source OS Needs to Be Based on Linux, and These Six Aren’t
17.10.2026
Distribution Release: FunOS 26.10
17.10.2026
How to Troubleshoot High Load Average on Linux Server
28.09.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Zum Aktualisieren ziehen
TTS Reader • tsecurity.de Voice
Nächster Beitrag