EILMELDUNGEN LIVE
Windows Tipps & SecurityMicrosoft rolls out a big Windows 11 Bluetooth upgrade, and AirPods now pair up to 15 seconds faster(19.10.2026 um 22:35 Uhr)
•
Windows Tipps & SecurityOne of Modern Warfare 4's most degenerate challenges has already been beaten(19.10.2026 um 22:36 Uhr)
•
Windows ServerPlex2Shell: Hacker kapern Plex-Server kurz nach Exploit-Offenlegung - WinFuture.de(19.10.2026 um 20:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-98447 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 XFS Inode Btree Root Formatting memory corruption (Nessus ID 367297)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-98445 | Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4 xfs xrep_newbt_add_blocks allocation of resources (Nessus ID 367296)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76879 | Wireshark up to 4.4.17/4.6.7 Dissector input validation (Nessus ID 367289)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-82397 | tornadoweb Tornado up to 6.5.7 Request Body Parsing tornado/web.py RequestHandler._execute infinite loop (Nessus ID 367287)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76928 | Wireshark up to 4.4.17/4.6.7 Dissector resource consumption (Nessus ID 367289)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-14029 | TornadoWeb Tornado up to 6.4.0 request smuggling (Nessus ID 367287)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-93521 | X.Org Server heap-based overflow (Nessus ID 367281)(19.10.2026 um 22:38 Uhr)
•
Windows Tipps & SecurityMicrosoft rolls out a big Windows 11 Bluetooth upgrade, and AirPods now pair up to 15 seconds faster(19.10.2026 um 22:35 Uhr)
•
Windows Tipps & SecurityOne of Modern Warfare 4's most degenerate challenges has already been beaten(19.10.2026 um 22:36 Uhr)
•
Windows ServerPlex2Shell: Hacker kapern Plex-Server kurz nach Exploit-Offenlegung - WinFuture.de(19.10.2026 um 20:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-98447 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 XFS Inode Btree Root Formatting memory corruption (Nessus ID 367297)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-98445 | Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4 xfs xrep_newbt_add_blocks allocation of resources (Nessus ID 367296)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76879 | Wireshark up to 4.4.17/4.6.7 Dissector input validation (Nessus ID 367289)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-82397 | tornadoweb Tornado up to 6.5.7 Request Body Parsing tornado/web.py RequestHandler._execute infinite loop (Nessus ID 367287)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76928 | Wireshark up to 4.4.17/4.6.7 Dissector resource consumption (Nessus ID 367289)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-14029 | TornadoWeb Tornado up to 6.4.0 request smuggling (Nessus ID 367287)(19.10.2026 um 22:38 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-93521 | X.Org Server heap-based overflow (Nessus ID 367281)(19.10.2026 um 22:38 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Stored Cross-Site Scripting via Imgur oEmbeds in WordPress

WordPress treated Imgur as a trusted oEmbed provider and embedded its returned HTML without sanitization. Markup an attacker could place in Imgur's oEmbed…

Sichere Programmierung Vulnerability definition feed 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (Vulnerability definition feed)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

WordPress treated Imgur as a trusted oEmbed provider and embedded its returned HTML without sanitization. Markup an attacker could place in Imgur's oEmbed response executed in the browser of anyone viewing a page where that Imgur URL was embedded. This vulnerability affects the following application versions: WordPress 3.9 WordPress 3.9.1... Weiterlesen: Stored Cross-Site Scripting via Imgur oEmbeds in WordPress

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

9 Quellen
CVE-2026-98447 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 XFS Inode Btree Root Formatting memory corruption (Nessus ID 367297)
8 weitere Quellen
tsecurity.devor 11 Min.CVE-2026-98445 | Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4 xfs xrep_newbt_add_blocks allocation of resources (Nessus ID 367296) tsecurity.devor 11 Min.CVE-2024-26738 | Linux Kernel up to 6.6.18/6.7.6 iommu_device_register null pointer dereference (b8315b2e25b4/46e36ebd5e00/a5c57fd2e9bd / WID-SEC-2024-0773) tsecurity.devor 11 Min.CVE-2024-26742 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 block/blk-mq-pci.c blk_mq_map_queues stack-based overflow (WID-SEC-2024-0773) tsecurity.devor 11 Min.CVE-2024-26741 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 dccp lib/dump_stack.c check_estalblished allocation of resources (Nessus ID 213018 / WID-SEC-2024-0773) tsecurity.devor 11 Min.CVE-2024-26744 | Linux Kernel up to 6.7.6 RDMA srpt_service_guid null pointer dereference (Nessus ID 210815 / WID-SEC-2024-0773) tsecurity.devor 11 Min.CVE-2024-26743 | Linux Kernel up to 6.7.6 on RIP RDMA qedr_init_user_queue allocation of resources (Nessus ID 210815 / WID-SEC-2024-0773)
+2
2 Quellen
CVE-2026-76879 | Wireshark up to 4.4.17/4.6.7 Dissector input validation (Nessus ID 367289)
1 weitere Quelle
tsecurity.devor 11 Min.CVE-2026-76928 | Wireshark up to 4.4.17/4.6.7 Dissector resource consumption (Nessus ID 367289)
2 Quellen
CVE-2026-82397 | tornadoweb Tornado up to 6.5.7 Request Body Parsing tornado/web.py RequestHandler._execute infinite loop (Nessus ID 367287)
1 weitere Quelle
tsecurity.devor 11 Min.CVE-2024-14029 | TornadoWeb Tornado up to 6.4.0 request smuggling (Nessus ID 367287)

Mehr aus dieser Kategorie

Engineering Audit-Ready Data Pipelines for Regulatory Reporting
19.10.2026
VaultSign AI
19.10.2026
I tried 6 WebDAV clients in 2026, here's what stuck
19.10.2026
Adopting worldmonitor at the Edge: Three CORS Layers, One KV Hedge, and a Bundle You Cannot Import
19.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Zum Aktualisieren ziehen
TTS Reader • tsecurity.de Voice
Nächster Beitrag