Sicherheitslücken (CVE)

Sicherheitslücken (CVE) The Hacker News

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every…

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-68116 | Linux Kernel up to 7.2-rc4 vxlan vxlan_mdb_remote_srcs_add allocation of resources (WID-SEC-2026-2730)

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as critical.

Sicherheitslücken (CVE) The Hacker News 2 sources

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web…

Sicherheitslücken (CVE) Arch Linux: Recent news upd… 9 sources

Update to php ≥ 8.5.12 and/or php-legacy ≥ 8.3.36 to prevent remote code execution

PHP versions prior to 8.5.12 and 8.3.36 are affected by CVE-2026-109618 and CVE-2026-109619, which allow for remote code execution.

Sicherheitslücken (CVE) DEV Community

No prompt injection required: Langchain-Chatchat's /tools/call is a remote shell

No prompt injection required: Langchain-Chatchat's /tools/call is a remote shell A vector breakdown of CVE-2026-75128 / GHSA-5rx2-xp53-9x5r…

Sicherheitslücken (CVE) The Hacker News

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not…

Sicherheitslücken (CVE) GBHackers Security 2 sources

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks

Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM.

Sicherheitslücken (CVE) Patchstack Blog

Major security alert: PHP vulnerable to critical RCE, attacks ongoing

Attacks are already under way: Patchstack has received reports of active exploitation from multiple hosting partners.

Sicherheitslücken (CVE) Vulnerability definition fe… 2 sources

Unauthenticated Arbitrary File Upload in ELEX HelpDesk IMAP Attachment Handling

The ELEX HelpDesk & Customer Ticketing System (WSDesk) plugin saves attachments from emails fetched over IMAP into the public uploads directory under…

Sicherheitslücken (CVE) Vulnerability definition fe… 2 sources

Unauthenticated SQL Injection in Essential Addons for Elementor Load More

The unauthenticated Load More and pagination AJAX handlers in Essential Addons for Elementor pass client-supplied query arguments to WP_Query without…

Sicherheitslücken (CVE) GBHackers Security

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0.

Proof of Concept (PoC) Exploit-DB.com RSS Feed 2 sources

[remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover

Keycloak 26.7.2 - Unauthenticated Account Takeover

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[webapps] Open eClass 3.15 - RCE

Sicherheitslücken (CVE) Full Disclosure

[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)

Posted by disclosure via Fulldisclosure on Oct 200day Rubbish Research Team is publicly disclosing a vulnerability in Royal Render 9.1.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-113703 | giuseppe99barchetta SuggestArr up to 2.x Authentication Middleware middleware.py enforce_authentication remote_addr improper authentication (EUVD-2026-105106)

A vulnerability marked as critical has been reported in giuseppe99barchetta SuggestArr up to 2.x.

Sicherheitslücken (CVE) infosecurity-magazine.com

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned

Sicherheitslücken (CVE) The Hacker News

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.

Sicherheitslücken (CVE) DEV Community

Counting BeyondTrust Remote Support appliances before patching CVE-2026-102764

Counting BeyondTrust Remote Support appliances before patching CVE-2026-102764 Patch instructions are only useful if you know which machines they…

Sicherheitslücken (CVE) Cyber Security News 2 sources

Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication

Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without…

Proof of Concept (PoC) The Hacker News

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day…

Sicherheitslücken (CVE) SecurityWeek

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.