EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
IT Security NachrichtenCVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK(10.11.2026 um 00:02 Uhr)
•
IT Security NachrichtenSEGA newsletter data breach exposes 2.2 million email addresses(09.11.2026 um 23:09 Uhr)
•
Sichere ProgrammierungFailover on a hard decline just gets you declined twice(10.11.2026 um 01:00 Uhr)
•
Sichere ProgrammierungAWS Gave Kubernetes Pods Their Own VM. What Can the Worker Still Write?(10.11.2026 um 01:00 Uhr)
•
Windows Tipps & SecurityGTA VI is already taking up 200GB of storage on your XBOX — this expansion card is still in stock(10.11.2026 um 01:00 Uhr)
•
Sichere ProgrammierungYour First In-App Purchase Has to Ride With an App Version in App Store Connect(10.11.2026 um 01:00 Uhr)
•
IT NachrichtenYouTube auf der Quest wird immersiv: Warum aus Bildschirmzeit plötzlich Seh-Training werden kann(10.11.2026 um 00:51 Uhr)
•
IT Security NachrichtenHotel giant Wyndham exposed customer data after app security lapse(10.11.2026 um 00:31 Uhr)
•
AI & KI NachrichtenGitHub Release: ollama/ollama v0.40.16 (10.11.2026)(10.11.2026 um 00:31 Uhr)
•
IT Security DownloadsGitHub Release: NousResearch/hermes-agent vrc.2-v0.23.1 (10.11.2026)(10.11.2026 um 00:22 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
IT Security NachrichtenCVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK(10.11.2026 um 00:02 Uhr)
•
IT Security NachrichtenSEGA newsletter data breach exposes 2.2 million email addresses(09.11.2026 um 23:09 Uhr)
•
Sichere ProgrammierungFailover on a hard decline just gets you declined twice(10.11.2026 um 01:00 Uhr)
•
Sichere ProgrammierungAWS Gave Kubernetes Pods Their Own VM. What Can the Worker Still Write?(10.11.2026 um 01:00 Uhr)
•
Windows Tipps & SecurityGTA VI is already taking up 200GB of storage on your XBOX — this expansion card is still in stock(10.11.2026 um 01:00 Uhr)
•
Sichere ProgrammierungYour First In-App Purchase Has to Ride With an App Version in App Store Connect(10.11.2026 um 01:00 Uhr)
•
IT NachrichtenYouTube auf der Quest wird immersiv: Warum aus Bildschirmzeit plötzlich Seh-Training werden kann(10.11.2026 um 00:51 Uhr)
•
IT Security NachrichtenHotel giant Wyndham exposed customer data after app security lapse(10.11.2026 um 00:31 Uhr)
•
AI & KI NachrichtenGitHub Release: ollama/ollama v0.40.16 (10.11.2026)(10.11.2026 um 00:31 Uhr)
•
IT Security DownloadsGitHub Release: NousResearch/hermes-agent vrc.2-v0.23.1 (10.11.2026)(10.11.2026 um 00:22 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
25.677 stories
🚨
IBM • CVE-2026-18836
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
Advisory ansehen ➔
LIVE …
All (25.677) 0-Days Critical ≥ 9.0 CISA KEV Exploit / PoC 24h Trends Videos Podcasts Tools Engagement
Newest Top stories Signals
25.677 stories
Platform-wide search ↗

Today

Yesterday

IT Security Tools KitPloit

keyeroo

Relays coerced NTLM authentication to LDAP and performs writes as the victim by recovering their session key over a Netlogon secure channel…

2 hours ago 1 Min
0
Read more
1 more source
GitHub1 day agoGitHub Release: center2055/OnionHop v3.10.1 (08.11.2026)

This week

IT Security Tools KitPloit

HyperLoader

Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls…

TA0002 · T1059 Windows Server 72%
2 days ago 1 Min
0
Read more
IT Security Tools KitPloit

kodeblue

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small model…

Unix & Linux Server 75%
2 days ago 1 Min
0
Read more
IT Security Tools KitPloit

dtls

Native Go implementation of DTLS 1.2 and 1.3 with ECDHE and PSK key exchange, AEAD ciphers, connection IDs, session resumption, 0-RTT, and Encrypted…

Admin & Dev Tools 73%
2 days ago 1 Min
0
Read more
IT Security Tools KitPloit

FuFuFaFa

Framework for Unified Flaw & Fault Auditing The ultimate AWS Cloud Security Audit Framework that makes security auditing so easy, you can do it even…

Cloud & IT-Enterprise IT Security Nachrichten 75%
2 days ago 1 Min
0
Read more
IT Security Tools KitPloit

Obscura

Threat Hunter & Attack Surface Management Platform A single static Go binary for passive & semi-offensive reconnaissance, correlation, risk scoring…

Reverse Engineering 74%
2 days ago 1 Min
0
Read more
IT Security Tools KitPloit

fluxion v6.39

Automated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…

TA0001 · T1566 Reverse Engineering 73%
2 days ago 1 Min
0
Read more
IT Security Tools KitPloit

hackersignal

7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…

Sicherheitslücken (CVE) 76%
3 days ago 1 Min
0
Read more
IT Security Tools KitPloit

one-second

Signed whitepaper and measurement showing Open WebUI's Windows installer derives WEBUI_SECRET_KEY from a time-seeded rand(), enabling blind master…

Windows Tipps & Security 74%
3 days ago 1 Min
0
Read more
IT Security Tools KitPloit

spillway

Prompt-injection defense for tool-using agents: structure decides where agents act, a model reviews refusals.

Sichere Programmierung 70%
3 days ago 1 Min
0
Read more
IT Security Tools KitPloit

sshole

openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.

IT Security Nachrichten 72%
3 days ago 1 Min
0
Read more
1 more source
Dr. Windows3 days agoSysinternals Suite: Process Explorer erreicht macOS – Autoruns kommt zu Linux
IT Security Tools KitPloit

cloudg

Map, graph and audit AWS, Azure and GCP from one CLI. Builds a topology graph, runs Prowler/Checkov/Trivy, tags findings against 28 compliance…

Cloud & IT-Enterprise Admin & Dev Tools 72%
4 days ago 1 Min
0
Read more
IT Security Tools KitPloit

xmtr

Parallel multi-target traceroute tool that traces IPv4/IPv6 routes with ICMP, TCP or UDP probes, resolves hop ASNs, and exports MTR-style tables and…

IT Security Downloads 71%
4 days ago 1 Min
0
Read more
IT Security Tools KitPloit

KEVin

REST API over the CISA Known Exploited Vulnerabilities catalog, exposing CVE lookups, recent KEV additions, text search, and merged CISA, MITRE, and…

Sicherheitslücken (CVE) 76%
4 days ago 1 Min
0
Read more
️ Compose threat hunter status update
Community Stream
News-Deck IT Security Tools 📖 0 · ⏭ 0 · 🗳️ 0

Loading cards …

Up = read in the preview · Right = next · Left/Down = back · Enter/tap card = preview · V = voting

Auto-Newslider · Slider
Advance every
Visible cards

Automatic news slider: use arrow keys to navigate, autoplay pauses on focus and gestures

Live signal stream 0 signals
Waiting for the first signals …
Sources view 22 sources

Aggregated over the last 14 days in this category (incl. subcategories).

Tails - News 1
Latest post: 30.10.2026 um 01:00 Uhr
Show stories (1)
0 articles saved
No saved articles yet.
Click the on a news item to add it.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken