EILMELDUNGEN LIVE
Malware / Trojaner / VireneMudhra intermediate CA keys exposed (weak P-384 generation). Browsers blocked the chains, but check your non-browser trust stores(22.10.2026 um 08:04 Uhr)
•
Malware / Trojaner / VirenHow APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia(22.10.2026 um 08:00 Uhr)
•
Linux Tipps & HardeningBest Photo Editing Apps in 2026(22.10.2026 um 07:44 Uhr)
•
Linux Tipps & HardeningKRAFTON Launches Battlin Platform for Competitive Gaming in India(22.10.2026 um 07:45 Uhr)
•
IT Security NachrichtenChina-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach(22.10.2026 um 07:25 Uhr)
•
IT Security NachrichtenHackers Are Breaking Into FortiGate, FortiWeb and Palo Alto GlobalProtect Systems to Steal Passwords(22.10.2026 um 08:30 Uhr)
•
AI & KI NachrichtenMalaysia’s TuJu app struggles after Anwar suggests switching from Waze(22.10.2026 um 07:15 Uhr)
•
IT Security NachrichtenGoogle Chrome adds Gemini-powered ClickFix warnings and scam detection(22.10.2026 um 07:52 Uhr)
•
IT Security NachrichtenTor removes hundreds of compromised relays used to hijack SSH logins(22.10.2026 um 08:11 Uhr)
•
Sicherheitslücken (CVE)Critical GitLab RCE Flaw Lets Attackers Execute Code Without Authentication(22.10.2026 um 07:29 Uhr)
•
Malware / Trojaner / VireneMudhra intermediate CA keys exposed (weak P-384 generation). Browsers blocked the chains, but check your non-browser trust stores(22.10.2026 um 08:04 Uhr)
•
Malware / Trojaner / VirenHow APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia(22.10.2026 um 08:00 Uhr)
•
Linux Tipps & HardeningBest Photo Editing Apps in 2026(22.10.2026 um 07:44 Uhr)
•
Linux Tipps & HardeningKRAFTON Launches Battlin Platform for Competitive Gaming in India(22.10.2026 um 07:45 Uhr)
•
IT Security NachrichtenChina-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach(22.10.2026 um 07:25 Uhr)
•
IT Security NachrichtenHackers Are Breaking Into FortiGate, FortiWeb and Palo Alto GlobalProtect Systems to Steal Passwords(22.10.2026 um 08:30 Uhr)
•
AI & KI NachrichtenMalaysia’s TuJu app struggles after Anwar suggests switching from Waze(22.10.2026 um 07:15 Uhr)
•
IT Security NachrichtenGoogle Chrome adds Gemini-powered ClickFix warnings and scam detection(22.10.2026 um 07:52 Uhr)
•
IT Security NachrichtenTor removes hundreds of compromised relays used to hijack SSH logins(22.10.2026 um 08:11 Uhr)
•
Sicherheitslücken (CVE)Critical GitLab RCE Flaw Lets Attackers Execute Code Without Authentication(22.10.2026 um 07:29 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

PHP Object Injection in Ninja Forms Submission CSV Export

Unauthenticated attackers can submit serialized PHP data in form fields that Ninja Forms unserializes when an administrator exports submissions to CSV. If a…

Sicherheitslücken (CVE) Vulnerability definition feed 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (Vulnerability definition feed)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Unauthenticated attackers can submit serialized PHP data in form fields that Ninja Forms unserializes when an administrator exports submissions to CSV. If a suitable POP chain exists in another installed plugin or theme, this can lead to arbitrary file operations or remote code execution. Sites running Ninja Forms 3.15.3 and earlier are affected.... Weiterlesen: PHP Object Injection in Ninja Forms Submission CSV Export

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

21 Quellen
CVE-2025-39732 | Linux Kernel up to 6.12.41/6.15.9/6.16.0 wmi.c ath11k_mac_op_set_bitrate_mask stack-based overflow (Nessus ID 270575 / WID-SEC-2025-1988)
20 weitere Quellen
VulDB Updates40 min. geledenCVE-2025-39705 | Linux Kernel up to 6.12.43/6.16.3 AMD Display Driver dc_destruct null pointer dereference (Nessus ID 261629 / WID-SEC-2025-1988) VulDB Updates40 min. geledenCVE-2025-39677 | Linux Kernel up to 6.16.3/6.17-rc2 sched qdisc_dequeue_internal infinite loop (Nessus ID 261622 / WID-SEC-2025-1988) VulDB Updates40 min. geledenCVE-2025-22070 | Linux Kernel up to 6.12.22/6.13.10/6.14.1 v9fs_fid_add null pointer dereference (EUVD-2025-11220 / Nessus ID 240657) VulDB Updates40 min. geledenCVE-2025-37860 | Linux Kernel up to 6.14.1 ef100_process_design_param null pointer dereference (EUVD-2025-11830 / Nessus ID 237088) VulDB Updates40 min. geledenCVE-2025-22113 | Linux Kernel up to 6.14.1 buffer overflow (Nessus ID 240657 / WID-SEC-2025-0844) VulDB Updates40 min. geledenCVE-2025-23135 | Linux Kernel up to 6.13.10/6.14.1 kernel/irq/manage.c kvm_exit state issue (Nessus ID 240657 / WID-SEC-2025-0844)
+14

Mehr aus dieser Kategorie

CVE-2025-39732 | Linux Kernel up to 6.12.41/6.15.9/6.16.0 wmi.c ath11k_mac_op_set_bitrate_mask stack-based overflow (Nessus ID 270575 / WID-SEC-2025-1988)
22.10.2026
CVE-2025-39705 | Linux Kernel up to 6.12.43/6.16.3 AMD Display Driver dc_destruct null pointer dereference (Nessus ID 261629 / WID-SEC-2025-1988)
22.10.2026
CVE-2025-39677 | Linux Kernel up to 6.16.3/6.17-rc2 sched qdisc_dequeue_internal infinite loop (Nessus ID 261622 / WID-SEC-2025-1988)
22.10.2026
CVE-2025-22070 | Linux Kernel up to 6.12.22/6.13.10/6.14.1 v9fs_fid_add null pointer dereference (EUVD-2025-11220 / Nessus ID 240657)
22.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Trek om te vernieuwen
TTS Reader • tsecurity.de Voice
Nächster Beitrag