EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4906 | Google Chrome up to 107.0.5304.121 Blink Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4910 | Google Chrome up to 106.0.5249.119 Autofill Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4912 | Google Chrome up to 104.0.5112.102 MathML type confusion (FEDORA-2023-6c8de2cd15)(10.11.2026 um 17:01 Uhr)
•
YouTube Security VideosMicrosoft Copilot: A last-minute ask answered with Copilot(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: 6 Front-End Concepts Every AI Builder Needs to Know(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: Prompt Agent vs. Agent Harness(10.11.2026 um 17:42 Uhr)
•
IT Security NachrichtenCSS Optimization: Is Using Declarations Just Once (UDJO) Still Effective Today?(10.11.2026 um 17:42 Uhr)
•
Web Security TippsSchedule meetings in a single click from conversations in Google Chat(10.11.2026 um 17:32 Uhr)
•
Sichere ProgrammierungChrome for Developers: Modern Web Guidance in your AI workflow: What is Modern Web Guidance?(10.11.2026 um 17:30 Uhr)
•
Windows Tipps & SecurityGrand Theft Auto 6 confirmed for Xbox Cloud Gaming on Xbox consoles(10.11.2026 um 17:30 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4906 | Google Chrome up to 107.0.5304.121 Blink Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4910 | Google Chrome up to 106.0.5249.119 Autofill Remote Code Execution (FEDORA-2023-8a94349e38)(10.11.2026 um 16:47 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4912 | Google Chrome up to 104.0.5112.102 MathML type confusion (FEDORA-2023-6c8de2cd15)(10.11.2026 um 17:01 Uhr)
•
YouTube Security VideosMicrosoft Copilot: A last-minute ask answered with Copilot(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: 6 Front-End Concepts Every AI Builder Needs to Know(10.11.2026 um 18:00 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: Prompt Agent vs. Agent Harness(10.11.2026 um 17:42 Uhr)
•
IT Security NachrichtenCSS Optimization: Is Using Declarations Just Once (UDJO) Still Effective Today?(10.11.2026 um 17:42 Uhr)
•
Web Security TippsSchedule meetings in a single click from conversations in Google Chat(10.11.2026 um 17:32 Uhr)
•
Sichere ProgrammierungChrome for Developers: Modern Web Guidance in your AI workflow: What is Modern Web Guidance?(10.11.2026 um 17:30 Uhr)
•
Windows Tipps & SecurityGrand Theft Auto 6 confirmed for Xbox Cloud Gaming on Xbox consoles(10.11.2026 um 17:30 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
399 Kennisgevingen
Specifieke gebieden: Alle Reverse engineering (399) Beveiligingslekken (CVE) ↗ Admin- & dev-tools ↗
🚨
IBM • CVE-2026-18836
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
Advisory ansehen ➔
LIVE …
Actief: Fabrikant: Microsoft Reset
Alles (399) 0-Days Critical ≥ 9.0 CISA KEV Exploit / PoC 24h Trends Videos Podcasts Tools Interactie
Laatste Belangrijk Signaal
399 Kennisgevingen
Platform-brede zoekopdracht

Vandaag

16 andere bronnen
VulDB Updates12 uur geledenCVE-2026-100225 | Microsoft Windows up to Server 2025 Storage buffer overflow (WID-SEC-2026-3892)VulDB Updates12 uur geledenCVE-2026-100222 | Microsoft Windows up to Server 2025 Network Policy Server buffer overflow (WID-SEC-2026-3892)VulDB Updates12 uur geledenCVE-2026-100220 | Microsoft Windows up to Server 2025 Media Video Decoder heap-based overflow (WID-SEC-2026-3892)VulDB Updates12 uur geledenCVE-2026-100219 | Microsoft Windows up to Server 2025 QUIC use after free (WID-SEC-2026-3892)VulDB Updates12 uur geledenCVE-2026-100218 | Microsoft Windows up to Server 2025 Remote Desktop Gateway Service use after free (WID-SEC-2026-3892)VulDB Updates12 uur geledenCVE-2026-100217 | Microsoft Windows up to Server 2025 Group Policy privileges management (WID-SEC-2026-3892)VulDB Updates12 uur geledenCVE-2026-100216 | Microsoft Windows up to Server 2025 buffer overflow (WID-SEC-2026-3892)VulDB Updates14 uur geledenCVE-2026-100203 | Microsoft Windows up to Server 2025 Windows Update Service buffer overflow (WID-SEC-2026-3892)VulDB Updates14 uur geledenCVE-2026-100201 | Microsoft Windows up to Server 2025 Client License Service buffer overflow (WID-SEC-2026-3892)VulDB Updates14 uur geledenCVE-2026-100202 | Microsoft Windows up to Server 2025 Queue Manager use after free (WID-SEC-2026-3892)VulDB Updates14 uur geledenCVE-2026-100200 | Microsoft Windows up to Server 2025 Windows Update Service use after free (WID-SEC-2026-3892)darkreading20 uur geledenMicrosoft Fixes RCE Bug in Windows Paint After Weeks of ConfusionVulDB Updates3 dagen geledenCVE-2025-54957 | Microsoft Windows up to Server 2025 Dolby Digital Plus Audio Decoder integer overflow (WID-SEC-2025-2307)The Hacker News4 dagen geledenMicrosoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It«Hacker News» 🗞️🦾 IT BOLTWI…4 dagen geledenCVE-2026-83844: Microsoft Paint mit möglicher 0-Click-RCE für WindowsIT Security News4 dagen geledenMicrosoft Paint 0-Click Vulnerability Could Allow Hackers to Take Control of Windows PCs

Gisteren

Beveiligingslekken (CVE) BSI Warn- und Informationsd…

[NEU] [hoch] Microsoft Entra Device Registration: Schwachstelle ermöglicht Privilegieneskalation

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft Entra Device Registration ausnutzen, um seine Privilegien zu erhöhen.

🛡️ Security Fix TA0001 · T1190 Sicherheitslücken (CVE) 94%
1 dag geleden 1 Min
0
Lees meer
1 een andere bron
VulDB Updates3 dagen geledenCVE-2026-109469 | Microsoft Entra Device Registration authorization (EUVD-2026-118542)
Beveiligingslekken (CVE) VulDB Updates

CVE-2026-112910 | tox-dev filelock up to 4.2.0 WindowsFileLock src/filelock/_windows.py _open_non_reparse_fd mode permission assignment (Nessus ID 377478)

A vulnerability described as problematic has been identified in tox-dev filelock up to 4.2.0.

🛡️ CVE-2026-112910 Medium 5.3 Sicherheitslücken (CVE) 100%
1 dag geleden 1 Min
0
Lees meer

Deze week

Beveiligingslekken (CVE) VulDB Updates

CVE-2025-56803 | Figma Desktop 125.6.5 on Windows manifest.json child_process.exec build command injection

A vulnerability was found in Figma Desktop 125.6.5 on Windows. It has been rated as critical. This impacts the function child_process.

🛡️ CVE-2025-56803 High 8.4 TA0001 · T1190 Sicherheitslücken (CVE) 100%
2 dagen geleden 1 Min
0
Lees meer
Beveiligingslekken (CVE) Latest from TechRadar

Even Microsoft Paint is being targeted by cyberattackers — update now or face the consequences

Microsoft fixes high-severity Paint vulnerability that could allow remote code execution through crafted image filesSecurity updates are delivered…

TA0001 · T1190 Sicherheitslücken (CVE) 94%
3 dagen geleden 1 Min
0
Lees meer
2 andere bronnen
«Hacker News» 🗞️🦾 IT BOLTWI…4 dagen geledenMicrosoft Paint: RCE-Fix kommt nur über Store-UpdateGBHackers Security4 dagen geledenMicrosoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction
Beveiligingslekken (CVE) Cyber Security News

Microsoft Warns AI Agents Are Stealing Exposed GitHub Credentials to Break Into Cloud Environments

Microsoft Threat Intelligence has warned that attackers are using agentic AI tools to find exposed credentials in public GitHub repositories and…

Cloud & IT-Enterprise Sicherheitslücken (CVE) 91%
4 dagen geleden 1 Min
0
Lees meer
Beveiligingslekken (CVE) Cyber Security News

Hackers Exploit Microsoft SharePoint ToolShell Vulnerabilities to Deploy Fileless Backdoor That Hides in Memory

Kaspersky researchers found a Storm-2603 attack on a SharePoint server that used ToolShell flaws to plant a fileless backdoor inside the IIS worker…

KEV ACTIVE Cloud & IT-Enterprise Sicherheitslücken (CVE) 98%
4 dagen geleden 1 Min
0
Lees meer
Beveiligingslekken (CVE) VulDB Updates

CVE-2026-56857 | Google Go standard library up to 1.26.8/1.27.1 os/internal/syscall/windows Root.Mkdir/Root.MkdirAll mount point (EUVD-2026-95420 / WID-SEC-2026-3841)

A vulnerability, which was classified as critical, has been found in Google Go standard library up to 1.26.8/1.27.1.

🛡️ CVE-2026-56857 Critical 9.8 Sicherheitslücken (CVE) 100%
5 dagen geleden 1 Min
0
Lees meer
Beveiligingslekken (CVE) Cyber Security News

Hackers Exploit Sogou Input Method Vulnerability to Install DarkVigil Spyware on Windows Computers

China-aligned threat actor SlippyNunchucks hijacked a Sogou Input Method update-style request to deliver the DarkVigil spyware, according to ESET…

🛡️ Security Fix Sicherheitslücken (CVE) 91%
5 dagen geleden 1 Min
0
Lees meer
️ Bedreigingen jager status update
Community Stream
News-Deck Reverse engineering 📖 0 · ⏭ 0 · 🗳️ 0

Kaarten zijn geladen ..

High = Read in Preview · Rechts = voor · Links/Down = Terug · Enter/Type Card = Preview · V = Stemmen

Auto-Newslider · Sliders
Alles wijzigen
Zichtbare kaarten

Automatische newslider: bladeren pijltjestoetsen links en rechts, automatische pauzes op focus en swiping gebaren

Live signaalstroom 0 Signaal
Wacht op de eerste signalen..
Bronweergave 24 Bronnen

Geaggregeerd gedurende de laatste 14 dagen van deze categorie (inclusief subcategorieën).

BSI Warn- und Informationsdienst… 105
Laatste bijdrage: 10.11.2026 um 14:12 Uhr
Berichten tonen (5)
Cyber Security News 99
Laatste bijdrage: 10.11.2026 um 17:43 Uhr
Berichten tonen (5)
GBHackers Security | #1 Globally… 52
Laatste bijdrage: 10.11.2026 um 13:01 Uhr
Berichten tonen (5)
«Hacker News» 🗞️🦾 IT BOLTWISE® 47
Laatste bijdrage: 10.11.2026 um 12:32 Uhr
Berichten tonen (5)
Borns IT- und Windows-Blog 9
Laatste bijdrage: 09.11.2026 um 01:53 Uhr
Debian Security 9
Laatste bijdrage: 08.11.2026 um 01:00 Uhr
Full Disclosure 9
Laatste bijdrage: 05.11.2026 um 05:30 Uhr
DEFCONConference 7
Laatste bijdrage: 06.11.2026 um 23:48 Uhr
RSS
FOSS Linux 4
Laatste bijdrage: 09.11.2026 um 03:05 Uhr
Blog on AlmaLinux 3
Laatste bijdrage: 06.11.2026 um 01:00 Uhr
Black Hat 3
Laatste bijdrage: 04.11.2026 um 19:47 Uhr
Android - GIGA 2
Laatste bijdrage: 08.11.2026 um 11:07 Uhr
CloudLinux 2
Laatste bijdrage: 07.11.2026 um 23:21 Uhr
Check Point Blog 2
Laatste bijdrage: 05.11.2026 um 14:01 Uhr
Between The Hacks 2
Laatste bijdrage: 03.11.2026 um 17:53 Uhr
Cybersafe News 2
Laatste bijdrage: 02.11.2026 um 11:07 Uhr
0 Opgemerkte artikelen
Geen gemerkte artikelen.
Klik op bij een bericht om het toe te voegen.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken