EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
YouTube Security VideosThe Linux Foundation: Vendor Lock-In Is the Biggest Risk to Your Data Infrastructure | Bianca Lewis(06.11.2026 um 21:01 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: Grounding agents in your trusted semantic models using Knowledge Catalog(06.11.2026 um 20:49 Uhr)
•
YouTube Security VideosTesla Cybertruck Unveil(06.11.2026 um 20:52 Uhr)
•
AI & KI NachrichtenMuse vs Dots: Which AI agent is best for Windows and Why?(06.11.2026 um 22:02 Uhr)
•
Windows ServerWoW Forever: Blizzard setzt zum Release auf 251 TiB RAM und mehr als 70.000 CPU-Kerne(06.11.2026 um 17:56 Uhr)
•
Windows Tipps & SecurityKB5132099 Windows 11 26H2 [Manueller Download] Wechsel der Beta auf die 26320(06.11.2026 um 19:22 Uhr)
•
Web Security TippsGoogle Workspace Weekly Recap - November 6, 2026(06.11.2026 um 20:47 Uhr)
•
Sicherheitslücken (CVE)Stored Cross-Site Scripting in Spectra Testimonial Block Carousel Arrows(06.11.2026 um 10:50 Uhr)
•
Sicherheitslücken (CVE)PHP Object Injection via Unsafe Deserialization of POST Parameters in Formidable Forms(06.11.2026 um 10:50 Uhr)
•
Sicherheitslücken (CVE)Authentication Bypass via URL Encoding in Access Governance for WordPress (AAM) URL Access Rules(06.11.2026 um 10:50 Uhr)
•
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
YouTube Security VideosThe Linux Foundation: Vendor Lock-In Is the Biggest Risk to Your Data Infrastructure | Bianca Lewis(06.11.2026 um 21:01 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: Grounding agents in your trusted semantic models using Knowledge Catalog(06.11.2026 um 20:49 Uhr)
•
YouTube Security VideosTesla Cybertruck Unveil(06.11.2026 um 20:52 Uhr)
•
AI & KI NachrichtenMuse vs Dots: Which AI agent is best for Windows and Why?(06.11.2026 um 22:02 Uhr)
•
Windows ServerWoW Forever: Blizzard setzt zum Release auf 251 TiB RAM und mehr als 70.000 CPU-Kerne(06.11.2026 um 17:56 Uhr)
•
Windows Tipps & SecurityKB5132099 Windows 11 26H2 [Manueller Download] Wechsel der Beta auf die 26320(06.11.2026 um 19:22 Uhr)
•
Web Security TippsGoogle Workspace Weekly Recap - November 6, 2026(06.11.2026 um 20:47 Uhr)
•
Sicherheitslücken (CVE)Stored Cross-Site Scripting in Spectra Testimonial Block Carousel Arrows(06.11.2026 um 10:50 Uhr)
•
Sicherheitslücken (CVE)PHP Object Injection via Unsafe Deserialization of POST Parameters in Formidable Forms(06.11.2026 um 10:50 Uhr)
•
Sicherheitslücken (CVE)Authentication Bypass via URL Encoding in Access Governance for WordPress (AAM) URL Access Rules(06.11.2026 um 10:50 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
977.534 Kennisgevingen
Specifieke gebieden: Alle IT-nieuws (977.534) Video's & congressen ↗
LIVE …
Alles (977.534) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interactie
Laatste Belangrijk Signaal
977.534 Kennisgevingen
Platform-brede zoekopdracht

Vandaag

IT-nieuws SD Times

Tessl Launches Software Factory Platform to Support AI Coding’s Transition from Assistance to Execution

NEW YORK — Tessl, the AI-native software development firm, has launched an open standards platform for building software factories to support the…

20 min. geleden 1 Min
0
Lees meer
IT-nieuws GeekWire

How to be unemployed: Glenn Kelman on life after Redfin

At a conference, a fashion entrepreneur gave Glenn Kelman a bracelet that said “we are enough.

Videos & Konferenzen 67%
44 min. geleden 1 Min
0
Lees meer
IT-nieuws ZDNET

Sony WH-1000XM6 vs. Sonos Ace Ultra: With only a $10 difference, which is better?

Sony’s and Sonos’ premium headphones cater to different users. Here’s which one is best for you.

Server Security 68%
52 min. geleden 1 Min
0
Lees meer
IT-nieuws Giga.de

Ab 14. Dezember: Millionen Deutsche bekommen Post vom Beitragsservice

Noch kostet der Rundfunkbeitrag 18,36 Euro pro Haushalt und Monat (Bildquelle: IMAGO / Aviation-Stock)Der Beitragsservice von ARD, ZDF und…

Android Tipps & Security 66%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws Technology

The nine best personalized gift ideas: customized for the person you love

Monogramming or customizing takes gifts to the next level – and shows recipients that you know what they like and who they areThe best beauty Advent…

Server Security 71%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws CNET

Google Store Drops Prices on Pixel Phones, Buds, Smart Home Gear and More Ahead of Black Friday

Save on Google’s latest devices, including Pixel phones, earbuds, smart home products and accessories.

Android Tipps & Security 76%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws CNET

Do You Speak Geek? 5 Tech Terms That Endure, and 5 That Got Defragged

Level up your vocab with these tech phrases that’ll give you major rizz.

1 uur geleden 1 Min
0
Lees meer
IT-nieuws Latest from TechRadar

13 waterproof jacket deals to save you from the November drizzle — up to 40% off leading brands

Drizzly autumn days can be pretty miserable, but I've found a bunch of waterproof jacket deals that might just put a smile back on your face.

Reverse Engineering 68%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws

5 things CIOs must understand to govern Claude Code

Claude Code has quickly become one of the most widely adopted AI agents in the enterprise.

Gov & Defense Sichere Programmierung 75%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws Kategorie: Wirtschaft

Diese Krankenkassen haben die meisten Mitglieder – bist du dabei?

Der Beitrag Diese Krankenkassen haben die meisten Mitglieder – bist du dabei? erschien zuerst beim Online-Magazin BASIC thinking.

Alle Kategorien 80%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws CNET

There’s a New Way to Shop With AI. Text Alexa

Amazon’s bots are the latest AI agents trying to do your shopping for you. Should you let them?

KI & AI Videos 73%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws The Verge

Shure’s popular podcasting and streaming mic is almost $50 off

Shure’s MV7 Plus is a popular podcasting and streaming mic. | Image: Shure While the Shure Mv7 Plus is popular with streamers and podcasters, it’s…

Podcasts & Audio Briefings 71%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws Engadget

Google's eyewear partners can't keep a lid on its smart glasses plans

Gentle Monster shared that its "Intelligent Eyewear" will be available to pre-order on November 12.

Android Tipps & Security 71%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws Giga.de

Weihnachtsmarkt bei euch daheim: Aldi macht es nächste Woche möglich

(Bildquelle: IMAGO / Rene Traut / Bearbeitung: GIGA)Wer Glühwein liebt, muss bald einen Besuch bei Aldi einplanen.Aldi Nord bietet ab dem 12.

Android Tipps & Security 65%
1 uur geleden 1 Min
0
Lees meer
IT-nieuws Caschys Blog

Google Health Version 5.12 bringt diverse Neuerungen auf Android und iOS

Google verteilt aktuell das Health-Update auf Version 5.12 für Android und iOS.

Alle Kategorien 80%
2 uur geleden 1 Min
0
Lees meer
IT-nieuws - Futurezone

„GTA 6“: Rockstar veröffentlicht brandneue Einblicke – sie zeigen auch einen weiteren Charakter

Immer wieder tauchen in den „GTA“-Spielen bekannte Gesichter aus der echten Welt auf.

Hacking & Pentesting 69%
2 uur geleden 1 Min
0
Lees meer
IT-nieuws - Futurezone

Archäologie: Forscher machen einzigartige Entdeckung in uraltem Grabhügel

Schon in der Antike wurde der Grabhügel bei Almaty geplündert und trotzdem gab er jetzt noch einen beeindruckenden Schatz preis.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws Caschys Blog

Gemini Omni 1.2 Flash: Schnelles und kostengünstigeres Generieren von (längeren) Video-Clips

Google legt bei der KI-Videogenerierung nach und hat Gemini Omni 1.2 Flash vorgestellt.

KI & AI Videos 77%
2 uur geleden 1 Min
0
Lees meer
IT-nieuws Giga.de

Die DDR-Sprache lebt weiter: Diese Wörter versteht nur, wer im Osten aufgewachsen ist

In der DDR entwickelten sich auch ganz eigene Begriffe. (Bildquelle: Getty Images – skynesher; creisinger / Bearbeitung: GIGA)Kreativ waren die…

2 uur geleden 1 Min
0
Lees meer
IT-nieuws heise online News

Top 10: Die beste Powerbank ab 20.000 mAh im Test – Anker nicht Testsieger

Zum Laden von Laptops unterwegs braucht es starke Powerbanks mit hoher Kapazität. Wir haben die besten mobilen Akkus ab 20.000 mAh getestet.

Finanzwesen & Banking IT Nachrichten 75%
2 uur geleden 1 Min
0
Lees meer
IT-nieuws WIRED

Rocco’s Black Friday Sale: Smart Fridges Hit Their Lowest Prices of 2026

The new Essential and certain colors of the original Classic are at their lowest prices of the year.

2 uur geleden 1 Min
0
Lees meer
2 andere bronnen
WIRED2 uur geledenEarly Black Friday Mattress Deals: Get Up to 35% Off WIRED-Tested FavoritesCNET2 uur geledenBest Buy’s Black Friday Sale Just Kicked Off. Its OLED TV Deals Are a Must-See
IT-nieuws Technology

Activists break into building site of Microsoft datacentre in Amsterdam

Separate actions also take place outside fence and across Europe in backlash against impact of AI boomActivists have stormed the site of a Microsoft…

2 uur geleden 1 Min
0
Lees meer
IT-nieuws Giga.de

Wem gehört Rowenta: Der Eigentümer führt noch andere bekannte Marken

Hinter Rowenta steckt ein französischer Konzern, der zahlreiche Haushaltsmarken unter einem Dach vereint.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws TechCrunch

Hundreds of Artex AI hacking tools found publicly exposed to the web

Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the…

Cloud & IT-Enterprise Server Security 75%
2 uur geleden 1 Min
0
Lees meer
IT-nieuws TechCrunch

Meta introduces Spaces, a new way to collaborate with your Muse agent

Meta's Muse agents continue to get new features and integrations. Spaces promises to be a new way to interact with the AI helpers.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws The Verge

Lame-duck Congress might actually do something: speed up energy projects

A massive permitting bill that could help energy projects come online much quicker and potentially lower utility bills for Americans is advancing…

2 uur geleden 1 Min
0
Lees meer
IT-nieuws NYT > Technology

F.A.A. to Phase Out Floppy Disks in Air Traffic Control Towers

Decades after the computer industry moved on, federal officials plan to finally ground the once-vaunted tech relic.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws Computer Bild

Apple MacBook Pro 16 Zoll PROLED XDR im Test: Lohnt sich der Touch?

OLED-Touchscreen, M5-Power und mehr: Apple frischt das MacBook Pro 16 kräftig auf.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws netzpolitik.org

„Zu schnell, zu groß“: Protestierende in ganz Europa kämpfen gegen den Rechenzentrums-Boom

In London, Amsterdam, Wien und anderen europäischen Städten gingen Aktivist*innen auf die Straße, um gegen Rechenzentren zu protestieren.

Cloud & IT-Enterprise
2 uur geleden 1 Min
0
Lees meer
IT-nieuws netzpolitik.org

“Too Fast, Too Big”: Activists Across Europe Challenge Data Center Rush

In London, Amsterdam, Vienna and other European cities, activists took to the streets on Friday to protest against data centers.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws WinFuture News

Glasfaserausbau: Mieterbund fordert Umlage-Ende - was das heißt

Der Glasfaserausbau könnte für Mieterhaushalte teurer werden.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws - Futurezone

Neuer Sprit für Millionen Benziner: Das soll sich bald beim Tanken ändern

E20 könnte künftig als klimafreundlichere und günstigere Alternative zur Verfügung stehen. Doch nicht jedes Fahrzeug verträgt den neuen Kraftstoff.

2 uur geleden 1 Min
0
Lees meer
IT-nieuws Giga.de

Neue Sparmöglichkeit für alle, die an Weihnachten auf die Bahn angewiesen sind

(Bildquelle: IMAGO / SNS UG / Steven Mohr / Bearbeitung: GIGA)Heute entschieden, morgen in den Zug: Ab 6,99 Euro gibt es bei der Bahn die…

2 uur geleden 1 Min
0
Lees meer
IT-nieuws heise online News

Deutschland will Manipulation von Satellitennavigation etwas entgegensetzen

Cyberagentur, Bundeswehr und DLR suchen Technologien zur Abwehr und gezielten Beeinflussung von Signalen für GPS & Co.

Gov & Defense
3 uur geleden 1 Min
0
Lees meer
️ Bedreigingen jager status update
Community Stream
News-Deck IT-nieuws 📖 0 · ⏭ 0 · 🗳️ 0

Kaarten zijn geladen ..

High = Read in Preview · Rechts = voor · Links/Down = Terug · Enter/Type Card = Preview · V = Stemmen

Auto-Newslider · Sliders
Alles wijzigen
Zichtbare kaarten

Automatische newslider: bladeren pijltjestoetsen links en rechts, automatische pauzes op focus en swiping gebaren

Live signaalstroom 0 Signaal
Wacht op de eerste signalen..
Bronweergave 24 Bronnen

Geaggregeerd gedurende de laatste 14 dagen van deze categorie (inclusief subcategorieën).

Giga.de 1279
Laatste bijdrage: 06.11.2026 um 21:25 Uhr
Berichten tonen (5)
Caschys Blog 352
Laatste bijdrage: 06.11.2026 um 20:30 Uhr
Berichten tonen (5)
CNET 315
Laatste bijdrage: 06.11.2026 um 21:14 Uhr
Berichten tonen (5)
Computer Bild - COMPUTER BILD 286
Laatste bijdrage: 06.11.2026 um 19:40 Uhr
Berichten tonen (5)
- Futurezone 250
Laatste bijdrage: 06.11.2026 um 20:21 Uhr
Berichten tonen (5)
GoogleWatchBlog 91
Laatste bijdrage: 06.11.2026 um 19:00 Uhr
Berichten tonen (5)
DEV Community 24
Laatste bijdrage: 04.11.2026 um 21:38 Uhr
heise & c't 19
Laatste bijdrage: 06.11.2026 um 11:06 Uhr
Berichten tonen (1)
0 Opgemerkte artikelen
Geen gemerkte artikelen.
Klik op bij een bericht om het toe te voegen.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken