/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:none;transition:none}}.ticker-track{animation:none!important}.ticker-content{cursor:default}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}} 🔒 Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions | Sicherheitslücken (CVE) – TSECURITY.DE
EILMELDUNGEN LIVE
Unix & Linux Server(中文) 从排查到合入：deepin LoongArch 内核修复实战(19.10.2026 um 04:24 Uhr)
•
Sichere ProgrammierungThe Pre-Submit Checklist That Cut My Adobe Stock Rejections To Nearly Zero(19.10.2026 um 05:00 Uhr)
•
Sichere ProgrammierungOne post, 14 networks: how our composer handles per-network text, limits and timing(19.10.2026 um 05:01 Uhr)
•
Sichere ProgrammierungMy webhook catcher hit 100 events and silently dropped the rest — I learned 'up to 100' is a promise with a cliff(19.10.2026 um 05:01 Uhr)
•
Sichere ProgrammierungAn Instant ADD COLUMN Waiting on One Slow SELECT Blocks Every Query Behind It(19.10.2026 um 05:01 Uhr)
•
Sichere ProgrammierungDefender Linux 2024: IA ligera contra amenazas modernas(19.10.2026 um 05:02 Uhr)
•
Sichere ProgrammierungHermes Micro-Agent: Pay-Per-Call API for AI Agents on Base (x402)(19.10.2026 um 05:02 Uhr)
•
Malware / Trojaner / VirenDeploy & Secure Linux with Microsoft Defender 2024(19.10.2026 um 05:03 Uhr)
•
Sichere ProgrammierungTwo Practitioners Picked Apart Our Cold Emails — Here's What Changed(19.10.2026 um 05:03 Uhr)
•
Sichere ProgrammierungThe houses on my list are my side hustle, so Gemma scores them and the list never leaves my phone(19.10.2026 um 05:03 Uhr)
•
Unix & Linux Server(中文) 从排查到合入：deepin LoongArch 内核修复实战(19.10.2026 um 04:24 Uhr)
•
Sichere ProgrammierungThe Pre-Submit Checklist That Cut My Adobe Stock Rejections To Nearly Zero(19.10.2026 um 05:00 Uhr)
•
Sichere ProgrammierungOne post, 14 networks: how our composer handles per-network text, limits and timing(19.10.2026 um 05:01 Uhr)
•
Sichere ProgrammierungMy webhook catcher hit 100 events and silently dropped the rest — I learned 'up to 100' is a promise with a cliff(19.10.2026 um 05:01 Uhr)
•
Sichere ProgrammierungAn Instant ADD COLUMN Waiting on One Slow SELECT Blocks Every Query Behind It(19.10.2026 um 05:01 Uhr)
•
Sichere ProgrammierungDefender Linux 2024: IA ligera contra amenazas modernas(19.10.2026 um 05:02 Uhr)
•
Sichere ProgrammierungHermes Micro-Agent: Pay-Per-Call API for AI Agents on Base (x402)(19.10.2026 um 05:02 Uhr)
•
Malware / Trojaner / VirenDeploy & Secure Linux with Microsoft Defender 2024(19.10.2026 um 05:03 Uhr)
•
Sichere ProgrammierungTwo Practitioners Picked Apart Our Cold Emails — Here's What Changed(19.10.2026 um 05:03 Uhr)
•
Sichere ProgrammierungThe houses on my list are my side hustle, so Gemma scores them and the list never leaves my phone(19.10.2026 um 05:03 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions

A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger remote c…

Sicherheitslücken (CVE) Cyber Security News 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (Cyber Security News)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger remote code execution across several Google-owned developer websites, according to researcher Simon Koeck. The issue affected the OAuth flow used by Google developer documentation sites, including... Weiterlesen: Google DevSite Flaw Let Attackers Execute Remote Code Through Forged …

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
4 Knoten · 3 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

41 Quellen
CVE-2026-89569 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Bluetooth RFCOMM rfcomm_security_cfm use after free (Nessus ID 366919)
40 weitere Quellen
VulDB Updatesvor 5 Std.CVE-2026-89575 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 dm raid1 build_constructor_string buffer overflow (Nessus ID 366919) VulDB Updatesvor 5 Std.CVE-2026-89576 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 dm-era metadata_take_snap memory leak (Nessus ID 366919) VulDB Updatesvor 5 Std.CVE-2026-89579 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 bpf bloom_map_alloc out-of-bounds write (Nessus ID 366919) VulDB Updatesvor 5 Std.CVE-2026-89582 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 bnx2x bnx2x_init_firmware double free (Nessus ID 366919) VulDB Updatesvor 5 Std.CVE-2026-89583 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Bluetooth eir_get_service_data out-of-bounds (Nessus ID 366919) VulDB Updatesvor 5 Std.CVE-2026-89587 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 ACPI query_capability stack-based overflow (Nessus ID 366919)
+34
22 Quellen
CVE-2026-92392 | curl up to 8.22.0 use after free (EUVD-2026-100915)
21 weitere Quellen
VulDB Updatesvor 5 Std.CVE-2026-97859 | Gitea prior 1.27.3/28.0.0 API Routes /api/v1/users username privileges management (EUVD-2026-103993) VulDB Updatesvor 5 Std.CVE-2026-97204 | Gitea up to 28.1.0 Labels authorization (EUVD-2026-103992) VulDB Updatesvor 5 Std.CVE-2026-110494 | Gitea up to 28.1.0 Attachment Linking information disclosure (EUVD-2026-103991) VulDB Updatesvor 5 Std.CVE-2026-110324 | Gitea up to 28.0.0 User Profiles privileges management (EUVD-2026-103990) VulDB Updatesvor 5 Std.CVE-2026-110311 | Gitea up to 28.1.0 Draft Release API information disclosure (EUVD-2026-103989) VulDB Updatesvor 5 Std.CVE-2026-107686 | Gitea up to 28.1.0 Web Handlers privileges management (EUVD-2026-103987)
+15
7 Quellen
CVE-2022-46956 | Dynamic Transaction Queuing System 1.0 /admin/manage_user.php id sql injection (EUVD-2022-49735)
6 weitere Quellen
VulDB Updatesvor 1 Std.CVE-2022-46967 | Revenue Collection System 1.0 /admin/DBbackup/ access control (ID 169916 / EUVD-2022-49745) VulDB Updatesvor 7 Std.CVE-2022-46951 | Dynamic Transaction Queuing System 1.0 ajax.php?action=delete_uploads id sql injection (EUVD-2022-49730) VulDB Updatesvor 7 Std.CVE-2022-46952 | Dynamic Transaction Queuing System 1.0 ajax.php?action=delete_user id sql injection (EUVD-2022-49731) VulDB Updatesvor 7 Std.CVE-2022-46953 | Dynamic Transaction Queuing System 1.0 ajax.php?action=save_window id sql injection (EUVD-2022-49732) VulDB Updatesvor 7 Std.CVE-2022-46955 | Dynamic Transaction Queuing System 1.0 ajax.php?action=save_queue id sql injection (EUVD-2022-49734) VulDB Updatesvor 7 Std.CVE-2022-46954 | Dynamic Transaction Queuing System 1.0 ajax.php?action=delete_transaction id sql injection (EUVD-2022-49733)

Mehr aus dieser Kategorie

CVE-2022-46956 | Dynamic Transaction Queuing System 1.0 /admin/manage_user.php id sql injection (EUVD-2022-49735)
19.10.2026
CVE-2022-46965 | totadministrativemandate Module up to 1.7.0 on PrestaShop sql injection (GHSA-hg7m-23j3-rf56 / EUVD-2022-49743)
19.10.2026
CVE-2022-46957 | SourceCodester Online Graduate Tracer System 1.0.0 cross site scripting (EUVD-2022-49736)
19.10.2026
CVE-2022-46967 | Revenue Collection System 1.0 /admin/DBbackup/ access control (ID 169916 / EUVD-2022-49745)
19.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Zum Aktualisieren ziehen
TTS Reader • tsecurity.de Voice
Nächster Beitrag