EILMELDUNGEN LIVE
Sicherheitslücken (CVE)CVE-2026-116461 | Omega Solution Restro POS up to 20261026 /sale-invoice/ productUnitSalePrice logic error (Issue 29)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2013-10077 | OctoPrint 1.0.0 API Key settings.py getSettings information disclosure(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-99099 | Linux Kernel up to 6.18.56/7.2.10 AMD CPU /CPU/AMD improper synchronization(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116505 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 device-information udhcpd.leases getDeviceInfo MAC address command injection (EUVD-2026-110448)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116471 | BKWLD Decoy up to 5.11.1 Authorization Policy Policy.php role privileges management(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116369 | Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 issue-handlers.ts handleListIssues state/labels os command injection (Issue 26)(01.11.2026 um 23:13 Uhr)
•
Sichere ProgrammierungGauge Chart for the Composite Credit Score(02.11.2026 um 00:16 Uhr)
•
Sichere ProgrammierungAI agents write almost all my code; a review counts for one exact commit(02.11.2026 um 00:17 Uhr)
•
AI & KI Nachrichten7 real cases where ChatGPT and Claude got datasheet values wrong (and how to check them)(02.11.2026 um 00:18 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116461 | Omega Solution Restro POS up to 20261026 /sale-invoice/ productUnitSalePrice logic error (Issue 29)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2013-10077 | OctoPrint 1.0.0 API Key settings.py getSettings information disclosure(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-99099 | Linux Kernel up to 6.18.56/7.2.10 AMD CPU /CPU/AMD improper synchronization(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116505 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 device-information udhcpd.leases getDeviceInfo MAC address command injection (EUVD-2026-110448)(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116471 | BKWLD Decoy up to 5.11.1 Authorization Policy Policy.php role privileges management(01.11.2026 um 23:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116369 | Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 issue-handlers.ts handleListIssues state/labels os command injection (Issue 26)(01.11.2026 um 23:13 Uhr)
•
Sichere ProgrammierungGauge Chart for the Composite Credit Score(02.11.2026 um 00:16 Uhr)
•
Sichere ProgrammierungAI agents write almost all my code; a review counts for one exact commit(02.11.2026 um 00:17 Uhr)
•
AI & KI Nachrichten7 real cases where ChatGPT and Claude got datasheet values wrong (and how to check them)(02.11.2026 um 00:18 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working…

Proof of Concept (PoC) The Hacker News 1 Min. Lesezeit Cloud & IT-Enterprise
Beitrag
0
Seite
0
↗ Quelle (The Hacker News)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the server to use thousands of times more memory than it... Weiterlesen: New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Me…

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Powiązany klaster opowieści i źródła (wektor AI)

23 źródeł
CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery
22 kolejnych źródeł
VulDB Updatesvor 1 Std.CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884) VulDB Updatesvor 1 Std.CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606) VulDB Updatesvor 1 Std.CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603) VulDB Updatesvor 1 Std.CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) VulDB Updatesvor 1 Std.CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600) VulDB Updatesvor 1 Std.CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)
+16
9 źródeł
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
8 kolejnych źródeł
VulDB Updatesvor 4 Std.CVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794) VulDB Updatesvor 4 Std.CVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
+2

Mehr aus dieser Kategorie

Pasta Inspector
01.11.2026
Android Developers: Building a Formula E co-driver on Android with ML Kit and Gemini Nano
30.10.2026
MercilessAmd
30.10.2026
Maximised JSON Array Attacks -- "Let the Commas Hit the Floor" Proof of Concept
29.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Rysunek do aktualizacji
TTS Reader • tsecurity.de Voice
Nächster Beitrag