EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL8.0CVE-2026-17309 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and tamper with configuration due to improper certificate validation.(07.11.2026 um 04:33 Uhr)
•
GLOBAL9.8CVE-2026-17301 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.6CVE-2026-17299 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not sufficiently restricted when processed, and the retrieved content could be returned to the attacker.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.9CVE-2026-17298 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.6CVE-2026-17297 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform an account takeover due to an open redirect vulnerability. The redirect address used during sign-in is not sufficiently validated, which could allow authentication results to be sent to an attacker-controlled location.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.6CVE-2026-17296 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:32 Uhr)
•
GLOBAL8.5CVE-2026-17294 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:32 Uhr)
•
GLOBAL8.5CVE-2026-17293 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify user profile information due to broken object-level authorization. Access checks do not confirm that the user is permitted to change the targeted profile.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.1CVE-2026-17292 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to take over ownership of other organizations due to broken object-level authorization. Access checks on organization objects are incomplete, which could allow ownership of organizations the user does not control to be changed.(07.11.2026 um 04:32 Uhr)
•
GLOBAL8.7CVE-2026-17291 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform account takeover due to an open redirect vulnerability. The redirect address used during OAuth 2.0 sign-in is not sufficiently validated, which could allow authentication results to be sent to an attacker-controlled location.(07.11.2026 um 04:32 Uhr)
•
YouTube Security VideosTheAIGRID: Anthropics Model 4 Just Shocked The AI Industry(07.11.2026 um 00:00 Uhr)
•
Linux Tipps & Hardening7 Best Command-Line Text Editors for Linux Sysadmin(07.11.2026 um 05:48 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4139 | Linux Kernel GPU i915 Kernel Driver permissions (EUVD-2022-51501 / Nessus ID 236642)(07.11.2026 um 03:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4141 | vim heap-based overflow (EUVD-2022-51503 / Nessus ID 211280)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4143 | GitLab improper authorization (Issue 383776 / EUVD-2022-51505)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4144 | QEMU QXL Display Device Emulation qxl_phys2virt out-of-bounds (FEDORA-2022-22b1f8dae2 / EUVD-2022-51506)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4167 | GitLab Enterprise Edition up to 15.5.6/15.6.3/15.7.1 Group Access Token improper authorization (Issue 367740 / EUVD-2022-51528)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4170 | Marc Lehmann rxvt-unicode Perl Background Extension injection (EUVD-2022-51531)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-60299 | Novel-Plus up to 5.2.0 /book/addCommentReply replyContent cross site scripting(07.11.2026 um 03:20 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-57457 | Curo UC300 5.42.1.7.1.63R1 Admin Panel IP Addr os command injection(07.11.2026 um 03:20 Uhr)
•
GLOBAL8.0CVE-2026-17309 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and tamper with configuration due to improper certificate validation.(07.11.2026 um 04:33 Uhr)
•
GLOBAL9.8CVE-2026-17301 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.6CVE-2026-17299 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not sufficiently restricted when processed, and the retrieved content could be returned to the attacker.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.9CVE-2026-17298 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.6CVE-2026-17297 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform an account takeover due to an open redirect vulnerability. The redirect address used during sign-in is not sufficiently validated, which could allow authentication results to be sent to an attacker-controlled location.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.6CVE-2026-17296 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:32 Uhr)
•
GLOBAL8.5CVE-2026-17294 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:32 Uhr)
•
GLOBAL8.5CVE-2026-17293 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify user profile information due to broken object-level authorization. Access checks do not confirm that the user is permitted to change the targeted profile.(07.11.2026 um 04:32 Uhr)
•
GLOBAL9.1CVE-2026-17292 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to take over ownership of other organizations due to broken object-level authorization. Access checks on organization objects are incomplete, which could allow ownership of organizations the user does not control to be changed.(07.11.2026 um 04:32 Uhr)
•
GLOBAL8.7CVE-2026-17291 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform account takeover due to an open redirect vulnerability. The redirect address used during OAuth 2.0 sign-in is not sufficiently validated, which could allow authentication results to be sent to an attacker-controlled location.(07.11.2026 um 04:32 Uhr)
•
YouTube Security VideosTheAIGRID: Anthropics Model 4 Just Shocked The AI Industry(07.11.2026 um 00:00 Uhr)
•
Linux Tipps & Hardening7 Best Command-Line Text Editors for Linux Sysadmin(07.11.2026 um 05:48 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4139 | Linux Kernel GPU i915 Kernel Driver permissions (EUVD-2022-51501 / Nessus ID 236642)(07.11.2026 um 03:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4141 | vim heap-based overflow (EUVD-2022-51503 / Nessus ID 211280)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4143 | GitLab improper authorization (Issue 383776 / EUVD-2022-51505)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4144 | QEMU QXL Display Device Emulation qxl_phys2virt out-of-bounds (FEDORA-2022-22b1f8dae2 / EUVD-2022-51506)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4167 | GitLab Enterprise Edition up to 15.5.6/15.6.3/15.7.1 Group Access Token improper authorization (Issue 367740 / EUVD-2022-51528)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4170 | Marc Lehmann rxvt-unicode Perl Background Extension injection (EUVD-2022-51531)(07.11.2026 um 03:11 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-60299 | Novel-Plus up to 5.2.0 /book/addCommentReply replyContent cross site scripting(07.11.2026 um 03:20 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-57457 | Curo UC300 5.42.1.7.1.63R1 Admin Panel IP Addr os command injection(07.11.2026 um 03:20 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

The PHP Incident

The PHP security incident is now (almost) old news. The timeline looks something like this: In late August, Wiz Research discovered two serious remote code…

Vulnerabilities (CVE) AI & ML – Radar 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (AI & ML – Radar)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

The PHP security incident is now (almost) old news. The timeline looks something like this: In late August, Wiz Research discovered two serious remote code execution vulnerabilities in PHP called PHP2Shell. They reported the vulnerabilities to the PHP team on August 24, which started working on fixes on September 21. Amazon apparently detected... Weiterlesen: The PHP Incident

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan public-facing services with OpenVAS, sharpen WAF rules, shorten patch windows.
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

17 sources
CVE-2025-61319 | ReNgine up to 2.2.0 Vulnerabilities cross site scripting
16 more sources
VulDB Updates49 min. agoCVE-2025-60535 | Wallos 4.1.1 GET Request currency cross-site request forgery VulDB Updates49 min. agoCVE-2025-55903 | CodeCanyon Perfex CRM 3.3.1 Estimate Bill To cross site scripting VulDB Updates6 hours agoCVE-2025-60967 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 cross site scripting VulDB Updates6 hours agoCVE-2025-60312 | SourceCodester Markdown to HTML Converter 1.0 Markdown Input cross site scripting VulDB Updates6 hours agoCVE-2025-56382 | LionCoders SalePro POS 5.4.8 Customer Management Customer Name cross site scripting VulDB Updates4 hours agoCVE-2026-71881 | GBIF Integrated Publishing Toolkit up to 3.3.4 cross site scripting (EUVD-2026-118543)
+10
15 sources
CVE-2022-4141 | vim heap-based overflow (EUVD-2022-51503 / Nessus ID 211280)
14 more sources
VulDB Updates3 hours agoCVE-2022-4143 | GitLab improper authorization (Issue 383776 / EUVD-2022-51505) VulDB Updates3 hours agoCVE-2022-4144 | QEMU QXL Display Device Emulation qxl_phys2virt out-of-bounds (FEDORA-2022-22b1f8dae2 / EUVD-2022-51506) VulDB Updates3 hours agoCVE-2022-4167 | GitLab Enterprise Edition up to 15.5.6/15.6.3/15.7.1 Group Access Token improper authorization (Issue 367740 / EUVD-2022-51528) VulDB Updates3 hours agoCVE-2022-4170 | Marc Lehmann rxvt-unicode Perl Background Extension injection (EUVD-2022-51531) VulDB Updates2 hours agoCVE-2025-61577 | D-Link DIR-816A2 1.10CNB05 dir_setWanWifi statuscheckpppoeuser stack-based overflow VulDB Updates1 hour agoCVE-2026-89092 | GNU C Library up to 2.44 nscd stack-based overflow (Nessus ID 377033 / WID-SEC-2026-3317)
+8
12 sources
CVE-2026-120551 | aresit WP Compress Plugin up to 7.22.01 on WordPress authorization (EUVD-2026-115661)
11 more sources
VulDB Updates2 hours agoCVE-2026-120518 | kalengi BuddyPress XProfile Custom Image Field Plugin up to 3.1.0 on WordPress XProfile Image Field bpxp_image_field_update_on_user_activation field_N_hidden path traversal (EUVD-2026-115659) VulDB Updates2 hours agoCVE-2026-120540 | iubenda Plugin up to 3.13.6 on WordPress HTML Parser parse_comments HTML injection (EUVD-2026-118572) VulDB Updates2 hours agoCVE-2026-119218 | WPSoul Greenshift Plugin up to 13.2.2 on WordPress Comment comment_author_url cross site scripting (EUVD-2026-118571) VulDB Updates2 hours agoCVE-2026-120741 | MotoPress Appointment Booking Lite Plugin up to 2.4.8 on WordPress REST Endpoint name cross site scripting (EUVD-2026-118570) VulDB Updates2 hours agoCVE-2026-119175 | gijo Flying Images Plugin up to 2.4.15 on WordPress Comment comment cross site scripting (EUVD-2026-118568) VulDB Updates2 hours agoCVE-2026-115816 | extendthemes Kubio AI Page Builder Plugin up to 2.9.4 on WordPress comment cross site scripting (EUVD-2026-118569)
+5

Mehr aus dieser Kategorie

CVE-2022-4139 | Linux Kernel GPU i915 Kernel Driver permissions (EUVD-2022-51501 / Nessus ID 236642)
07.11.2026
CVE-2022-4141 | vim heap-based overflow (EUVD-2022-51503 / Nessus ID 211280)
07.11.2026
CVE-2022-4143 | GitLab improper authorization (Issue 383776 / EUVD-2022-51505)
07.11.2026
CVE-2022-4144 | QEMU QXL Display Device Emulation qxl_phys2virt out-of-bounds (FEDORA-2022-22b1f8dae2 / EUVD-2022-51506)
07.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag