EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2026-116461 | Omega Solution Restro POS up to 20261026 /sale-invoice/ productUnitSalePrice logic error (Issue 29)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2013-10077 | OctoPrint 1.0.0 API Key settings.py getSettings information disclosure(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-99099 | Linux Kernel up to 6.18.56/7.2.10 AMD CPU /CPU/AMD improper synchronization(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116505 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 device-information udhcpd.leases getDeviceInfo MAC address command injection (EUVD-2026-110448)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116471 | BKWLD Decoy up to 5.11.1 Authorization Policy Policy.php role privileges management(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116369 | Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 issue-handlers.ts handleListIssues state/labels os command injection (Issue 26)(01.11.2026 um 23:13 Uhr)
•
Sichere ProgrammierungGauge Chart for the Composite Credit Score(02.11.2026 um 00:16 Uhr)
•
Sichere ProgrammierungAI agents write almost all my code; a review counts for one exact commit(02.11.2026 um 00:17 Uhr)
•
AI & KI Nachrichten7 real cases where ChatGPT and Claude got datasheet values wrong (and how to check them)(02.11.2026 um 00:18 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116461 | Omega Solution Restro POS up to 20261026 /sale-invoice/ productUnitSalePrice logic error (Issue 29)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2013-10077 | OctoPrint 1.0.0 API Key settings.py getSettings information disclosure(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-99099 | Linux Kernel up to 6.18.56/7.2.10 AMD CPU /CPU/AMD improper synchronization(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116505 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 device-information udhcpd.leases getDeviceInfo MAC address command injection (EUVD-2026-110448)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116471 | BKWLD Decoy up to 5.11.1 Authorization Policy Policy.php role privileges management(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116369 | Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 issue-handlers.ts handleListIssues state/labels os command injection (Issue 26)(01.11.2026 um 23:13 Uhr)
•
Sichere ProgrammierungGauge Chart for the Composite Credit Score(02.11.2026 um 00:16 Uhr)
•
Sichere ProgrammierungAI agents write almost all my code; a review counts for one exact commit(02.11.2026 um 00:17 Uhr)
•
AI & KI Nachrichten7 real cases where ChatGPT and Claude got datasheet values wrong (and how to check them)(02.11.2026 um 00:18 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

PHP2Shell plus Fragnesia: A dangerous new route from web server to root

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US…

Sicherheitslücken (CVE) CSO Online 1 Min. Lesezeit TA0004 · T1068
Beitrag
0
Seite
0
↗ Quelle (CSO Online)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild.... Weiterlesen: PHP2Shell plus Fragnesia: A dangerous new route from web server to root

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1068TA0004 · Privilege Escalation
Exploitation for Privilege Escalation
Mitigation: M1026 Privileged Account Management & Patching
Quelle: Kontext-Klassifikation des Artikeltextes
LynisOpenSCAPosquery
Privilege Escalation
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
5 Knoten · 4 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

23 Quellen
CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery
22 weitere Quellen
VulDB Updatesvor 1 Std.CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884) VulDB Updatesvor 1 Std.CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606) VulDB Updatesvor 1 Std.CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603) VulDB Updatesvor 1 Std.CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) VulDB Updatesvor 1 Std.CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600) VulDB Updatesvor 1 Std.CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)
+16
9 Quellen
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
8 weitere Quellen
VulDB Updatesvor 4 Std.CVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
+2

Mehr aus dieser Kategorie

CVE-2026-116461 | Omega Solution Restro POS up to 20261026 /sale-invoice/ productUnitSalePrice logic error (Issue 29)
01.11.2026
CVE-2013-10077 | OctoPrint 1.0.0 API Key settings.py getSettings information disclosure
01.11.2026
CVE-2026-99099 | Linux Kernel up to 6.18.56/7.2.10 AMD CPU /CPU/AMD improper synchronization
01.11.2026
CVE-2026-116505 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 device-information udhcpd.leases getDeviceInfo MAC address command injection (EUVD-2026-110448)
01.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Zum Aktualisieren ziehen
TTS Reader • tsecurity.de Voice
Nächster Beitrag