EILMELDUNGEN LIVE News-Tinder DECK
Sicherheitslücken (CVE)CVE-2022-46751 | Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Visual Analyzer xml injection (Nessus ID 210929)(11.11.2026 um 07:03 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-44729 | Oracle Business Process Management Suite 12.2.1.4.0 BPM Composer server-side request forgery (Nessus ID 233387)(11.11.2026 um 07:03 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4222 | SourceCodester Canteen Management System POST Request ajax_invoice.php query search sql injection (EUVD-2022-51582)(11.11.2026 um 06:56 Uhr)
•
Windows Tipps & SecurityVodafone Black Week: Unlimited-Tarif ab 29,99 Euro und bis zu 1.128 Euro Rabatt mit iPhone 18 Pro(11.11.2026 um 10:50 Uhr)
•
IT Security NachrichtenConsulting für ProAV-Projekte(11.11.2026 um 10:30 Uhr)
•
Windows Tipps & SecuritySamsung P9 im Test: Extrem schnell, erstaunlich kühl – aber teuer(11.11.2026 um 10:30 Uhr)
•
Windows Tipps & SecurityMicrosoft’s Auto SR Upscaling Tech Comes to the ROG XBOX Ally X and AMD-Powered Copilot+ PCs(11.11.2026 um 10:28 Uhr)
•
Sichere ProgrammierungUSN-8952-3: Tornado regression(11.11.2026 um 09:15 Uhr)
•
Linux Tipps & HardeningUSN-9039-1: Linux kernel (Azure CVM) vulnerabilities(11.11.2026 um 09:12 Uhr)
•
Linux Tipps & HardeningSecurity: Mehrere Probleme in openexr (Debian)(11.11.2026 um 07:48 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-46751 | Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Visual Analyzer xml injection (Nessus ID 210929)(11.11.2026 um 07:03 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-44729 | Oracle Business Process Management Suite 12.2.1.4.0 BPM Composer server-side request forgery (Nessus ID 233387)(11.11.2026 um 07:03 Uhr)
•
Sicherheitslücken (CVE)CVE-2022-4222 | SourceCodester Canteen Management System POST Request ajax_invoice.php query search sql injection (EUVD-2022-51582)(11.11.2026 um 06:56 Uhr)
•
Windows Tipps & SecurityVodafone Black Week: Unlimited-Tarif ab 29,99 Euro und bis zu 1.128 Euro Rabatt mit iPhone 18 Pro(11.11.2026 um 10:50 Uhr)
•
IT Security NachrichtenConsulting für ProAV-Projekte(11.11.2026 um 10:30 Uhr)
•
Windows Tipps & SecuritySamsung P9 im Test: Extrem schnell, erstaunlich kühl – aber teuer(11.11.2026 um 10:30 Uhr)
•
Windows Tipps & SecurityMicrosoft’s Auto SR Upscaling Tech Comes to the ROG XBOX Ally X and AMD-Powered Copilot+ PCs(11.11.2026 um 10:28 Uhr)
•
Sichere ProgrammierungUSN-8952-3: Tornado regression(11.11.2026 um 09:15 Uhr)
•
Linux Tipps & HardeningUSN-9039-1: Linux kernel (Azure CVM) vulnerabilities(11.11.2026 um 09:12 Uhr)
•
Linux Tipps & HardeningSecurity: Mehrere Probleme in openexr (Debian)(11.11.2026 um 07:48 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Stored Cross-Site Scripting in TablePress Datetime Shortcode Attribute

A table's datetime format string was interpolated straight into an inline JavaScript command without escaping, so a value containing a quote could break out…

Sicherheitslücken (CVE) Vulnerability definition feed 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (Vulnerability definition feed)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

A table's datetime format string was interpolated straight into an inline JavaScript command without escaping, so a value containing a quote could break out and execute script in the browser of anyone viewing the table. The format string is now passed through wp_json_encode with JSON_HEX_TAG, which escapes quotes and angle brackets. This... Weiterlesen: Stored Cross-Site Scripting in TablePress Datetime Shortcode Attribute

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
2 Knoten · 1 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwant Story Cluster & Sources (vector AI)

7 Bronnen
CVE-2022-44729 | Oracle Business Process Management Suite 12.2.1.4.0 BPM Composer server-side request forgery (Nessus ID 233387)
6 andere bronnen
VulDB Updates4 uur geledenCVE-2022-44729 | Oracle Financial Services Revenue Management and Billing up to 6.0.0 Infrastructure server-side request forgery (Nessus ID 233387) VulDB Updates4 uur geledenCVE-2022-46751 | Oracle Communications Cloud Native Core Automated Test Suite ATS Framework xml injection (Nessus ID 210929) VulDB Updates4 uur geledenCVE-2022-44729 | Oracle WebLogic Server 12.2.1.4.0/14.1.1.0.0 Centralized Thirdparty Jars server-side request forgery (Nessus ID 233387) VulDB Updates4 uur geledenCVE-2022-44729 | Oracle Database up to 19.20/21.11 Spatial/Graph server-side request forgery (Nessus ID 233387) VulDB Updates4 uur geledenCVE-2022-44729 | Oracle Middleware Common Libraries and Tools 12.2.1.4.0 Third Party server-side request forgery (Nessus ID 233387) VulDB Updates3 uur geledenCVE-2022-44729 | Oracle Hyperion Financial Reporting 11.2.14.0.000 Installation server-side request forgery (Nessus ID 233387)

Mehr aus dieser Kategorie

Adobe schließt hochkritische Lücken in Connect und AEM
11.11.2026
USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities
11.11.2026
CVE-2026-59191 | CakePHP TwigView up to 1.3.2/2.1.1 FileLoader FileLoader::findTemplate path traversal (EUVD-2026-123139)
11.11.2026
CVE-2026-59192 | CakePHP TwigView Plugin up to 1.3.2/2.1.1 Unserialize Filter unserialize deserialization (EUVD-2026-123138)
11.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Trek om te vernieuwen
TTS Reader • tsecurity.de Voice
Nächster Beitrag