EILMELDUNGEN LIVE
YouTube Security VideosVisual Studio Code: 🍰 Compare Models & Harnesses with Agent Bake Off!(28.10.2026 um 17:30 Uhr)
•
YouTube Security Videosheise & c't: Eure Fragen zu Glasfaser!(28.10.2026 um 15:00 Uhr)
•
YouTube Security Videosheise & c't: #heiseshow: Apple-Experience, KI-Profit, Cookie-Banner(28.10.2026 um 16:49 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: AI Agent Memory Architecture: Structured SQL, Semantic Vector Search & Memory Bank(28.10.2026 um 17:00 Uhr)
•
AI & KI NachrichtenFireship: Did the AI bubble just pop?(28.10.2026 um 14:31 Uhr)
•
Podcasts & Audio BriefingsUniverse week, hackable badges, and GitHub's open source dilemma | S02E06 | The GitHub Podcast(28.10.2026 um 16:00 Uhr)
•
YouTube Security VideosFlutter notable commits - September 2026(28.10.2026 um 17:00 Uhr)
•
YouTube Security VideosPC-WELT: 5 Dinge, die du nie von einem Gamer hören wirst 🤷‍♂️🎮(28.10.2026 um 15:30 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: New Conditional Access policy plans in Microsoft Entra(28.10.2026 um 15:59 Uhr)
•
YouTube Security VideosChrome for Developers: Support for WebMCP in Chrome DevTools(28.10.2026 um 17:11 Uhr)
•
YouTube Security VideosVisual Studio Code: 🍰 Compare Models & Harnesses with Agent Bake Off!(28.10.2026 um 17:30 Uhr)
•
YouTube Security Videosheise & c't: Eure Fragen zu Glasfaser!(28.10.2026 um 15:00 Uhr)
•
YouTube Security Videosheise & c't: #heiseshow: Apple-Experience, KI-Profit, Cookie-Banner(28.10.2026 um 16:49 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: AI Agent Memory Architecture: Structured SQL, Semantic Vector Search & Memory Bank(28.10.2026 um 17:00 Uhr)
•
AI & KI NachrichtenFireship: Did the AI bubble just pop?(28.10.2026 um 14:31 Uhr)
•
Podcasts & Audio BriefingsUniverse week, hackable badges, and GitHub's open source dilemma | S02E06 | The GitHub Podcast(28.10.2026 um 16:00 Uhr)
•
YouTube Security VideosFlutter notable commits - September 2026(28.10.2026 um 17:00 Uhr)
•
YouTube Security VideosPC-WELT: 5 Dinge, die du nie von einem Gamer hören wirst 🤷‍♂️🎮(28.10.2026 um 15:30 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: New Conditional Access policy plans in Microsoft Entra(28.10.2026 um 15:59 Uhr)
•
YouTube Security VideosChrome for Developers: Support for WebMCP in Chrome DevTools(28.10.2026 um 17:11 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Hackers Actively Exploiting New Oracle EBS RCE Vulnerability

Hackers have begun testing a critical Oracle E-Business Suite vulnerability that can let them run commands without logging in. Threat intelligence firm Defused…

Sicherheitslücken (CVE) Cyber Security News 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (Cyber Security News)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Hackers have begun testing a critical Oracle E-Business Suite vulnerability that can let them run commands without logging in. Threat intelligence firm Defused reported exploratory exploit attempts against its decoy systems on October 27, 2026. However, these observations do not confirm successful attacks against customer systems, and Oracle had... Weiterlesen: Hackers Actively Exploiting New Oracle EBS RCE Vulnerability

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
4 Knoten · 3 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Powiązany klaster opowieści i źródła (wektor AI)

13 źródeł
CVE-2026-34749 | payloadcms payload up to 3.79.0 cross-site request forgery (GHSA-p6mr-xf3r-ghq4)
12 kolejnych źródeł
VulDB Updatesvor 2 Std.CVE-2026-34748 | payloadcms payload up to 3.77.x cross site scripting (GHSA-mmxc-95ch-2j7c) VulDB Updatesvor 2 Std.CVE-2026-34747 | payloadcms payload up to 3.79.0 sql injection (GHSA-7xxh-373w-35vg) VulDB Updatesvor 2 Std.CVE-2026-34559 | ci4-cms-erp ci4ms 0.28.5.0 tag name cross site scripting (GHSA-4333-387x-w245) VulDB Updatesvor 1 Std.CVE-2026-34566 | ci4-cms-erp ci4ms 0.28.5.0 cross site scripting (GHSA-458r-h248-29c5) VulDB Updatesvor 1 Std.CVE-2026-34571 | ci4-cms-erp ci4ms 0.28.5.0 Administrative Interface cross site scripting (GHSA-fc4p-p49v-r948) VulDB Updatesvor 1 Std.CVE-2026-34569 | ci4-cms-erp ci4ms 0.28.5.0 category title cross site scripting (GHSA-fhrf-q333-82fm)
+6

Mehr aus dieser Kategorie

Microsoft Authenticator: Bösartige Apps konnten Zugangstoken abgreifen | heise online
28.10.2026
Most data centers and servers on the planet could be vulnerable to dangerous UEFI firmware flaw — here's what we know
28.10.2026
USN-8956-2: Brotli vulnerability
27.10.2026
CVE-2025-63031 | WP Grids EasyTest Plugin up to 1.0.1 on WordPress authorization
28.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Rysunek do aktualizacji
TTS Reader • tsecurity.de Voice
Nächster Beitrag