EILMELDUNGEN LIVE
Windows Tipps & SecurityBeyond Chatbots: 5 ways Meta Muse can transform your Daily Workflow(03.11.2026 um 01:28 Uhr)
•
Unix & Linux ServerHow to Download Files from the Command Line in Linux Using Wget(03.11.2026 um 05:42 Uhr)
•
Linux Tipps & HardeningDSA-6605-1 chromium - security update(02.11.2026 um 01:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-48363 | MPD prior 0.23.8 PipeWire Output Plugin null pointer dereference (EUVD-2022-51062)(03.11.2026 um 03:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-48364 | Mastodon 3.5.0/3.5.1/3.5.2 Status Update approve_appeal_service.rb undo_mark_statuses_as_sensitive information disclosure (EUVD-2022-51063)(03.11.2026 um 03:18 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-48422 | ONLYOFFICE Docs up to 7.3 on Linux libgcc_s.so.1 untrusted search path (EUVD-2022-51118)(03.11.2026 um 03:18 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-15291 | Linux Kernel up to 5.2.9 USB Device flexcop-usb.c flexcop_usb_probe null pointer dereference (USN-4254-1)(03.11.2026 um 03:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-1552 | OpenSSL up to 1.0.2s/1.1.0k/1.1.1c on Windows mingw OPENSSLDIR certificate validation (K94041354 / Nessus ID 211827)(03.11.2026 um 03:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-14777 | VideoLAN VLC Media Player 3.0.7.1 demux/mkv/mkv.cpp use after free (USN-4131-1)(03.11.2026 um 03:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-14776 | VideoLAN VLC Media Player 3.0.7.1 MKV File demux/asf/asf.c DemuxInit out-of-bounds (USN-4131-1)(03.11.2026 um 03:27 Uhr)
•
Windows Tipps & SecurityBeyond Chatbots: 5 ways Meta Muse can transform your Daily Workflow(03.11.2026 um 01:28 Uhr)
•
Unix & Linux ServerHow to Download Files from the Command Line in Linux Using Wget(03.11.2026 um 05:42 Uhr)
•
Linux Tipps & HardeningDSA-6605-1 chromium - security update(02.11.2026 um 01:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-48363 | MPD prior 0.23.8 PipeWire Output Plugin null pointer dereference (EUVD-2022-51062)(03.11.2026 um 03:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-48364 | Mastodon 3.5.0/3.5.1/3.5.2 Status Update approve_appeal_service.rb undo_mark_statuses_as_sensitive information disclosure (EUVD-2022-51063)(03.11.2026 um 03:18 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-48422 | ONLYOFFICE Docs up to 7.3 on Linux libgcc_s.so.1 untrusted search path (EUVD-2022-51118)(03.11.2026 um 03:18 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-15291 | Linux Kernel up to 5.2.9 USB Device flexcop-usb.c flexcop_usb_probe null pointer dereference (USN-4254-1)(03.11.2026 um 03:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-1552 | OpenSSL up to 1.0.2s/1.1.0k/1.1.1c on Windows mingw OPENSSLDIR certificate validation (K94041354 / Nessus ID 211827)(03.11.2026 um 03:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-14777 | VideoLAN VLC Media Player 3.0.7.1 demux/mkv/mkv.cpp use after free (USN-4131-1)(03.11.2026 um 03:27 Uhr)
•
Sicherheitslücken (CVE)CVE-2019-14776 | VideoLAN VLC Media Player 3.0.7.1 MKV File demux/asf/asf.c DemuxInit out-of-bounds (USN-4131-1)(03.11.2026 um 03:27 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Curl - A UAF turned RCE

submitted by /u/FryBoyter [link] [comments]

Vulnerabilities (CVE) Linux, GNU/Linux, free software... 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (Linux, GNU/Linux, free software...)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

submitted by /u/FryBoyter [link] [comments] Weiterlesen: Curl - A UAF turned RCE

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan public-facing services with OpenVAS, sharpen WAF rules, shorten patch windows.
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
4 Knoten · 3 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

18 sources
CVE-2026-117635 | Gitea up to 28.2.x Admin API /api/v1/admin privileges management (WID-SEC-2026-4281)
17 more sources
VulDB Updates2 hours agoCVE-2026-117649 | Gitea up to 28.2.x Issue Timeline API information disclosure (WID-SEC-2026-4281) VulDB Updates2 hours agoCVE-2026-117677 | Gitea up to 28.2.x Helm Chart Chart.yaml resource consumption (WID-SEC-2026-4281) VulDB Updates2 hours agoCVE-2026-117646 | Gitea up to 28.2.x User Profile privileges management (WID-SEC-2026-4281) VulDB Updates2 hours agoCVE-2026-117685 | Gitea up to 28.2.x Cross-Repository Blob Mount privileges management (WID-SEC-2026-4281) VulDB Updates2 hours agoCVE-2026-118394 | Gitea up to 28.2.x OAuth2 Userinfo Endpoint /login/oauth/userinfo improper authorization (WID-SEC-2026-4281) VulDB Updates26 min. agoCVE-2026-118395 | Gitea up to 28.2.x authorization (WID-SEC-2026-4281)
+11
14 sources
CVE-2026-107029 | rubenalfon Pile 1.1.3 permission (EUVD-2026-113183)
13 more sources
VulDB Updates1 hour agoCVE-2026-107024 | Archive Share 2 Archive Today Clipboard url permission (EUVD-2026-113179) VulDB Updates4 hours agoCVE-2026-63667 | ApostropheCMS Apostrophe up to 3.6.1 Import-Export gzip.js _id/name/extension path traversal (EUVD-2026-60441) VulDB Updates4 hours agoCVE-2026-71450 | Johnson Controls EasyIO Neo EC/CW Edge Controller up to 3.3b62/3.3b63/3.3b24/3.3b25 improper authentication (EUVD-2026-115650) VulDB Updates3 hours agoCVE-2022-48360 | Huawei Smart Phone Facial Recognition permission (EUVD-2022-51059) VulDB Updates6 hours agoCVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission (EUVD-2026-115628) VulDB Updates6 hours agoCVE-2026-113440 | benoitc hackney up to 4.8.x src/hackney.erl hackney.follow_redirect missing encryption (EUVD-2026-109835)
+7
12 sources
CVE-2019-14777 | VideoLAN VLC Media Player 3.0.7.1 demux/mkv/mkv.cpp use after free (USN-4131-1)
11 more sources
VulDB Updates2 hours agoCVE-2019-14776 | VideoLAN VLC Media Player 3.0.7.1 MKV File demux/asf/asf.c DemuxInit out-of-bounds (USN-4131-1) VulDB Updates2 hours agoCVE-2019-14535 | VideoLAN VLC Media Player 3.0.7.1 WMV File demux/asf/asf.c SeekIndex divide by zero (USN-4131-1) VulDB Updates2 hours agoCVE-2019-14534 | VideoLAN VLC Media Player 3.0.7.1 demux/asf/asf.c SeekPercent null pointer dereference (USN-4131-1) VulDB Updates2 hours agoCVE-2019-14533 | VideoLAN VLC Media Player 3.0.7.1 demux/asf/asf.c use after free (USN-4131-1) VulDB Updates2 hours agoCVE-2019-14498 | VideoLAN VLC Media Player 3.0.7.1 CAF File demux/caf.c divide by zero (USN-4131-1) VulDB Updates2 hours agoCVE-2019-14438 | VideoLAN VLC Media Player 3.0.7.1 OGG File modules/demux/xiph.h xiph_PackHeaders out-of-bounds (USN-4131-1)
+5

Mehr aus dieser Kategorie

CVE-2022-48363 | MPD prior 0.23.8 PipeWire Output Plugin null pointer dereference (EUVD-2022-51062)
03.11.2026
CVE-2022-48364 | Mastodon 3.5.0/3.5.1/3.5.2 Status Update approve_appeal_service.rb undo_mark_statuses_as_sensitive information disclosure (EUVD-2022-51063)
03.11.2026
CVE-2022-48422 | ONLYOFFICE Docs up to 7.3 on Linux libgcc_s.so.1 untrusted search path (EUVD-2022-51118)
03.11.2026
CVE-2019-15291 | Linux Kernel up to 5.2.9 USB Device flexcop-usb.c flexcop_usb_probe null pointer dereference (USN-4254-1)
03.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag