EILMELDUNGEN LIVE
YouTube Security VideosTechLinked: Discord chats are hitting Google search(29.10.2026 um 20:09 Uhr)
•
YouTube Security VideosAn Engineering Sprint for Speech Restoration | Neuralink(29.10.2026 um 19:53 Uhr)
•
YouTube Security VideosMicrosoft Copilot: Copilot for finance(29.10.2026 um 20:00 Uhr)
•
Windows ServerBitwarden 2026.10 Passwortmanager mit einigen Änderungen auch beim Self-Hosting [Update](29.10.2026 um 19:13 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-845: MLflow Statsmodels _load_model Deserialization of Untrusted Data Remote Code Execution Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-844: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability(29.10.2026 um 06:00 Uhr)
•
YouTube Security VideosTechLinked: Discord chats are hitting Google search(29.10.2026 um 20:09 Uhr)
•
YouTube Security VideosAn Engineering Sprint for Speech Restoration | Neuralink(29.10.2026 um 19:53 Uhr)
•
YouTube Security VideosMicrosoft Copilot: Copilot for finance(29.10.2026 um 20:00 Uhr)
•
Windows ServerBitwarden 2026.10 Passwortmanager mit einigen Änderungen auch beim Self-Hosting [Update](29.10.2026 um 19:13 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-845: MLflow Statsmodels _load_model Deserialization of Untrusted Data Remote Code Execution Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-844: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability(29.10.2026 um 06:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability(29.10.2026 um 06:00 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three…

Cyber Security Bulletins The Hacker News 1 Min. Lesezeit TA0011 · T1505 Cloud & IT-Enterprise
Beitrag
0
Seite
0
↗ Quelle (The Hacker News)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an attacker sends via a web request, with the rights of... Weiterlesen: Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1505TA0011 · Command and Control
Server Software Component
Mitigation: M1018 User Account Management
Quelle: Kontext-Klassifikation des Artikeltextes
YARALOKIphp-malware-finder
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

2 sources
ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability
1 more source
ZDI: Published Advisories14 hours agoZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability

Mehr aus dieser Kategorie

CYBER BRIEFING | October 27, 2026
29.10.2026
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
29.10.2026
Sicherheit: Universität Leipzig nimmt nach Cyberangriff ganze IT offline - Golem.de
29.10.2026
Alphabet Heads For a $500 Billion Drop In Market Value
29.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag