EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4906 | Google Chrome up to 107.0.5304.121 Blink Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4910 | Google Chrome up to 106.0.5249.119 Autofill Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4912 | Google Chrome up to 104.0.5112.102 MathML type confusion (FEDORA-2023-6c8de2cd15)(10.11.2026 um 17:01 Uhr)
•
YouTube Security VideosMicrosoft Copilot: A last-minute ask answered with Copilot(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: 6 Front-End Concepts Every AI Builder Needs to Know(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: Prompt Agent vs. Agent Harness(10.11.2026 um 17:42 Uhr)
•
IT Security NachrichtenCSS Optimization: Is Using Declarations Just Once (UDJO) Still Effective Today?(10.11.2026 um 17:42 Uhr)
•
Web Security TippsSchedule meetings in a single click from conversations in Google Chat(10.11.2026 um 17:32 Uhr)
•
Sichere ProgrammierungChrome for Developers: Modern Web Guidance in your AI workflow: What is Modern Web Guidance?(10.11.2026 um 17:30 Uhr)
•
Windows Tipps & SecurityGrand Theft Auto 6 confirmed for Xbox Cloud Gaming on Xbox consoles(10.11.2026 um 17:30 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4906 | Google Chrome up to 107.0.5304.121 Blink Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4910 | Google Chrome up to 106.0.5249.119 Autofill Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4912 | Google Chrome up to 104.0.5112.102 MathML type confusion (FEDORA-2023-6c8de2cd15)(10.11.2026 um 17:01 Uhr)
•
YouTube Security VideosMicrosoft Copilot: A last-minute ask answered with Copilot(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: 6 Front-End Concepts Every AI Builder Needs to Know(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: Prompt Agent vs. Agent Harness(10.11.2026 um 17:42 Uhr)
•
IT Security NachrichtenCSS Optimization: Is Using Declarations Just Once (UDJO) Still Effective Today?(10.11.2026 um 17:42 Uhr)
•
Web Security TippsSchedule meetings in a single click from conversations in Google Chat(10.11.2026 um 17:32 Uhr)
•
Sichere ProgrammierungChrome for Developers: Modern Web Guidance in your AI workflow: What is Modern Web Guidance?(10.11.2026 um 17:30 Uhr)
•
Windows Tipps & SecurityGrand Theft Auto 6 confirmed for Xbox Cloud Gaming on Xbox consoles(10.11.2026 um 17:30 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
462.020 Kennisgevingen
Specifieke gebieden: Alle Reverse engineering (462.020) Beveiligingslekken (CVE) ↗ Admin- & dev-tools ↗
🚨
IBM • CVE-2026-18836
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
Advisory ansehen ➔
LIVE …
Alles (462.020) 0-Days Critical ≥ 9.0 CISA KEV Exploit / PoC 24h Trends Videos Podcasts Tools Interactie
Laatste Belangrijk Signaal
462.020 Kennisgevingen
Platform-brede zoekopdracht

Vandaag

Beveiligingslekken (CVE) BSI Warn- und Informationsd…

[NEU] [mittel] Shibboleth Identity Provider: Schwachstelle ermöglicht Cross-Site Scripting

Ein entfernter Angreifer kann eine Schwachstelle in Shibboleth Identity Provider ausnutzen, um Dateien zu manipulieren oder einen Cross-Site…

🛡️ Security Fix TA0001 · T1190 Sicherheitslücken (CVE) 65%
4 uur geleden 1 Min
0
Lees meer
9 andere bronnen
BSI Warn- und Informationsd…4 uur geleden[NEU] [hoch] Pega Platform: Schwachstelle ermöglicht Cross-Site ScriptingBSI Warn- und Informationsd…4 uur geleden[NEU] [mittel] Contao: Schwachstelle ermöglicht Offenlegung von InformationenBSI Warn- und Informationsd…4 uur geleden[NEU] [mittel] Python: Schwachstelle ermöglicht Manipulation von DateienBSI Warn- und Informationsd…6 uur geleden[NEU] [mittel] Google Cloud Service Mesh: Schwachstelle ermöglicht Denial of ServiceBSI Warn- und Informationsd…6 uur geleden[NEU] [mittel] Infoblox NIOS: Schwachstelle ermöglicht Cross-Site ScriptingBSI Warn- und Informationsd…6 uur geleden[NEU] [mittel] Ghostscript: Schwachstelle ermöglicht CodeausführungBSI Warn- und Informationsd…6 uur geleden[NEU] [UNGEPATCHT] [mittel] Tinyproxy: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenBSI Warn- und Informationsd…7 uur geleden[UPDATE] [mittel] RPM: Schwachstelle ermöglicht CodeausführungBSI Warn- und Informationsd…1 dag geleden[NEU] [mittel] JetBrains PyCharm: Schwachstelle ermöglicht Codeausführung
Beveiligingslekken (CVE) BSI Warn- und Informationsd…

[NEU] [UNGEPATCHT] [hoch] Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC WinCC ausnutzen, um beliebigen Programmcode auszuführen.

🛡️ Security Fix TA0001 · T1190 Sicherheitslücken (CVE) 65%
4 uur geleden 1 Min
0
Lees meer
7 andere bronnen
BSI Warn- und Informationsd…4 uur geleden[NEU] [UNGEPATCHT] [hoch] Siemens SIMATIC: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit BenutzerrechtenBSI Warn- und Informationsd…6 uur geleden[UPDATE] [hoch] RPM: Schwachstelle ermöglicht CodeausführungBSI Warn- und Informationsd…6 uur geleden[NEU] [hoch] Atlassian Confluence: Schwachstelle ermöglicht CodeausführungBSI Warn- und Informationsd…1 dag geleden[NEU] [hoch] IBM Tape Library: Schwachstelle ermöglicht Erlangen von BenutzerrechtenBSI Warn- und Informationsd…1 dag geleden[NEU] [hoch] Red Hat Enterprise Linux (yggdrasil-worker-package-manager): Schwachstelle ermöglicht PrivilegieneskalationBSI Warn- und Informationsd…1 dag geleden[NEU] [UNGEPATCHT] [hoch] PyTorch: Schwachstelle ermöglicht PrivilegieneskalationBSI Warn- und Informationsd…1 dag geleden[NEU] [hoch] Microsoft Entra Device Registration: Schwachstelle ermöglicht Privilegieneskalation
1 een andere bron
it-daily.net4 uur geledenSecurity Awareness: Wenn Mitarbeiter zur Schwachstelle werden
1 een andere bron
IT-Administrator5 uur geledenCVSS 10.0 im Viererpack: SAP-Admins unter Zugzwang
1 een andere bron
«Hacker News» 🗞️🦾 IT BOLTWI…9 uur geledenChrome-Update schließt aktiv ausgenutzte Zero-Day-Lücke (CVE-2026-125350)
1 een andere bron
Google Alert10 uur geledenPatchday November: CVSS 10,0 in Entra, kein Update [2026] - shattered.io
1 een andere bron
BSI Warn- und Informationsd…1 dag geleden[NEU] [niedrig] JetBrains You Track: Schwachstelle ermöglicht Darstellen falscher Informationen

Gisteren

️ Bedreigingen jager status update
Community Stream
News-Deck Reverse engineering 📖 0 · ⏭ 0 · 🗳️ 0

Kaarten zijn geladen ..

High = Read in Preview · Rechts = voor · Links/Down = Terug · Enter/Type Card = Preview · V = Stemmen

Auto-Newslider · Sliders
Alles wijzigen
Zichtbare kaarten

Automatische newslider: bladeren pijltjestoetsen links en rechts, automatische pauzes op focus en swiping gebaren

Live signaalstroom 0 Signaal
Wacht op de eerste signalen..
Bronweergave 24 Bronnen

Geaggregeerd gedurende de laatste 14 dagen van deze categorie (inclusief subcategorieën).

BSI Warn- und Informationsdienst… 105
Laatste bijdrage: 10.11.2026 um 14:12 Uhr
Berichten tonen (5)
Cyber Security News 99
Laatste bijdrage: 10.11.2026 um 17:43 Uhr
Berichten tonen (5)
GBHackers Security | #1 Globally… 52
Laatste bijdrage: 10.11.2026 um 13:01 Uhr
Berichten tonen (5)
«Hacker News» 🗞️🦾 IT BOLTWISE® 47
Laatste bijdrage: 10.11.2026 um 12:32 Uhr
Berichten tonen (5)
Borns IT- und Windows-Blog 9
Laatste bijdrage: 09.11.2026 um 01:53 Uhr
Debian Security 9
Laatste bijdrage: 08.11.2026 um 01:00 Uhr
Full Disclosure 9
Laatste bijdrage: 05.11.2026 um 05:30 Uhr
DEFCONConference 7
Laatste bijdrage: 06.11.2026 um 23:48 Uhr
RSS
FOSS Linux 4
Laatste bijdrage: 09.11.2026 um 03:05 Uhr
Blog on AlmaLinux 3
Laatste bijdrage: 06.11.2026 um 01:00 Uhr
Black Hat 3
Laatste bijdrage: 04.11.2026 um 19:47 Uhr
Android - GIGA 2
Laatste bijdrage: 08.11.2026 um 11:07 Uhr
CloudLinux 2
Laatste bijdrage: 07.11.2026 um 23:21 Uhr
Check Point Blog 2
Laatste bijdrage: 05.11.2026 um 14:01 Uhr
Between The Hacks 2
Laatste bijdrage: 03.11.2026 um 17:53 Uhr
Cybersafe News 2
Laatste bijdrage: 02.11.2026 um 11:07 Uhr
0 Opgemerkte artikelen
Geen gemerkte artikelen.
Klik op bij een bericht om het toe te voegen.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken