🛡️ Sicherheitslücken (CVE) – Cybersecurity News & Diskussionsportal

Cybersecurity News & Diskussionsportal

⚡ tsecurity.de Intelligence

447.916 Bildirimler

LIVE …

Bütün Bütün Hepsi (447.916) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaction

Dil: Tüm diller Almanca (de) English (en)

Burada Wanted: Überwachung 27.802 Android 11 14.493 Windows 10 13.455 CVE 32.762 Google Chrome 13.394 Malware 60.238 VPN 50.559 Exploit 24.385 RCE 13.854 [local] 14.968

Yapımcı: Tüm üreticiler Microsoft Linux / Kernel Apple Cisco Google Fortinet

Vectors: Tüm vektörler Critical CVSS 9+ Threat PoC & Exploit Code ATT&CK 0-Day / CISA KEV Threat NIS-2 Meldepflicht Compliance Initial Access ATT&CK Privilege Escalation ATT&CK Auth Bypass ATT&CK Remote Code Execution Threat

Eylemler: RSS Feed CTI SENTINEL: LIVE

447.916 Bildirimler

Bugün

Sicherheitslücken (CVE) Offensive Security Blog: La…

php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploit

Cutting Through the php2shell Noise On October 20, details of php2shell, two pre-auth RCE vulnerabilities in the PHP core discovered by Calif…

EPSS 11.6% TA0001 · T1190 Kat #PoC & Deep Dive 80%

vor 30 Min. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-58291 | Flatboard 3.2 Session Cookie cross site scripting (Exploit 52054 / EDB-52054)

A vulnerability was found in Flatboard 3.2 and classified as problematic. Affected is an unknown function of the component Session Cookie Handler.

🛡️ CVE-2024-58291 Medium 5.3

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-2105 | JBL Xtreme 3 BLE improper validation of specified type of input (hbsa-2025-0002)

A vulnerability was found in JBL Flip 5, Flip 6, Pulse 4, Pulse 5, Boombox 2, Boombox 3 and Xtreme 3 and classified as critical.

🛡️ CVE-2024-2105 Medium 6.5

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-63402 | HCL Limited HCLTech GRAGON up to 7.5.x API allocation of resources

A vulnerability described as critical has been identified in HCL Limited HCLTech GRAGON up to 7.5.x.

🛡️ CVE-2025-63402 Medium 5.5

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-65883 | Genexis Platinum P4410 Router 1.41 Requests session expiration

A vulnerability classified as problematic was found in Genexis Platinum P4410 Router 1.41.

🛡️ CVE-2025-65883 High 8.4

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-62686 | Plugin Alliance Installation Manager 1.4.0 on macOS InstallationHelper Service DYLD_INSERT_LIBRARIES injection

A vulnerability marked as problematic has been reported in Plugin Alliance Installation Manager 1.4.0 on macOS.

🛡️ CVE-2025-62686 Medium 6.2

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44653 | Kashipara Ecommerce Website 1.0 user_login.php user_email sql injection

A vulnerability was found in Kashipara Ecommerce Website 1.0 and classified as critical. Affected is an unknown function of the file user_login.php.

🛡️ CVE-2024-44653 Medium 6.5 TA0001 · T1190

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44662 | PHPGurukul Online Shopping Portal 2.0 Admin Page username sql injection

A vulnerability labeled as critical has been found in PHPGurukul Online Shopping Portal 2.0.

🛡️ CVE-2024-44662 Medium 6.5 TA0001 · T1190

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) Latest from TechRadar

Microsoft and others scramble to patch 'HTTP2Shell' flaw which could be the next PHP-level issue — Node.js problem may also affect millions of sites

A critical Brotli compression flaw, dubbed HTTP2Shell, could enable memory corruption and remote code executionThe vulnerability affects widely used…

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44648 | PHPGurukul Small CRM 3.0 quote-details.php id/adminremark sql injection

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical.

🛡️ CVE-2024-44648 Medium 6.5 TA0001 · T1190

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44632 | PHPGurukul Student Record System 3.20 password-recovery.php id/emailid sql injection

A vulnerability marked as critical has been reported in PHPGurukul Student Record System 3.20.

🛡️ CVE-2024-44632 Medium 6.5 TA0001 · T1190

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-45431 | OpenSynergy BlueSDK up to 6.x input validation

A vulnerability categorized as critical has been discovered in OpenSynergy BlueSDK up to 6.x. This issue affects some unknown processing.

🛡️ CVE-2024-45431 Medium 5.3

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) CNET

Last Week’s Critical PHP Warning Was the Tip of the Web Vulnerability Iceberg

AI is finding new holes in the infrastructure of the internet. Is anyone around to patch them?

🛡️ Security Fix

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) KitPloit

secprbench

Benchmark of 265 real vulnerability-introducing code changes across nine C, C++, and Rust projects, with paired review tasks, Docker sandbox, judge…

vor 1 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE)

IT Security News Hourly Summary 2026-10-27 19h : 23 posts

23 posts published in the last hour 17:46CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection…

TA0001 · T1190 Cloud & IT-Enterprise

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) Help Net Security

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk.

🛡️ CVE-2026-111497 Critical 9.2 EPSS 36%

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-63334 | PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 POST Parameter submit_opacity.php opacityValue os command injection

A vulnerability categorized as critical has been discovered in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1.

🛡️ CVE-2025-63334 Critical 9.8 TA0001 · T1190

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-52910 | Samsung Mobile Processor/Wearable Processor Exynos up to 2400 GPU use after free

A vulnerability labeled as critical has been found in Samsung Mobile Processor and Wearable Processor Exynos up to 2400.

🛡️ CVE-2025-52910 Critical 9.8

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-60925 | codeshare 1.0.0 information disclosure

A vulnerability categorized as problematic has been discovered in codeshare 1.0.0. This issue affects some unknown processing.

🛡️ CVE-2025-60925 Medium 5.3

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) Google Alert

php2shell: Erfolgreiche Angriffe auf PHP-Schwachstelle bestätigt | heise online

It was translated with technical ... Ob Sicherheitslücken, Viren oder Trojaner – alle sicherheitsrelevanten Meldungen gibts bei heise security ...

🛡️ Security Fix TA0001 · T1190

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-60319 | PerfreeBlog 4.0.11 API Endpoint AttachController.java uploadAttachByUrl authorization

A vulnerability identified as problematic has been detected in PerfreeBlog 4.0.11.

🛡️ CVE-2025-60319 Medium 6.5

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-60355 | zhangyd-c OneBlog up to 2.3.8 FreeMarker Template special elements in template engine

A vulnerability identified as problematic has been detected in zhangyd-c OneBlog up to 2.3.8.

🛡️ CVE-2025-60355 Critical 9.8

vor 2 Std. 1 Min

Daha fazla oku

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-38564 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 bpf type confusion (Nessus ID 209785 / WID-SEC-2024-1418)

A vulnerability was found in Linux Kernel up to 6.6.32/6.8.11/6.9.2. It has been declared as problematic.

🛡️ CVE-2024-38564 High 7.8

vor 2 Std. 1 Min

Daha fazla oku

Download more 36 posts

Activate otomatik sonsuz şarj

Side 1 from 1.000 Andbull; Total: 447.916 Madde Madde Madde

Kaydedilmiş makale yok.
Eklemek için bir haber üzerindeki simgesine tıklayın.

🚀 Auf tsecurity.de entdecken

🕒 tsecurity.de Such-Trends & Chronologie

Sicherheitslücken (CVE)

SonicWall SMA1000: Kritische SSRF-Lücke & RCEs behoben - Security-Insider

CVE-2024-44652 | Kashipara Ecommerce Website 1.0 user_register.php sql injection

CVE-2024-44647 | PHPGurukul Small CRM 3.0 manage-tickets.php aremark cross site scripting

CVE-2024-44648 | PHPGurukul Small CRM 3.0 quote-details.php id/adminremark sql injection

CVE-2024-44635 | PHPGurukul Student Record System 3.20 /admin-profile.php aemailid cross site scripting

CVE-2024-44632 | PHPGurukul Student Record System 3.20 password-recovery.php id/emailid sql injection

Filtreler ve sıralama

Bugün

php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploit

CVE-2024-58291 | Flatboard 3.2 Session Cookie cross site scripting (Exploit 52054 / EDB-52054)

CVE-2024-2105 | JBL Xtreme 3 BLE improper validation of specified type of input (hbsa-2025-0002)

CVE-2025-63402 | HCL Limited HCLTech GRAGON up to 7.5.x API allocation of resources

CVE-2025-65883 | Genexis Platinum P4410 Router 1.41 Requests session expiration

CVE-2025-62686 | Plugin Alliance Installation Manager 1.4.0 on macOS InstallationHelper Service DYLD_INSERT_LIBRARIES injection

CVE-2024-44653 | Kashipara Ecommerce Website 1.0 user_login.php user_email sql injection

CVE-2024-44662 | PHPGurukul Online Shopping Portal 2.0 Admin Page username sql injection

Microsoft and others scramble to patch 'HTTP2Shell' flaw which could be the next PHP-level issue — Node.js problem may also affect millions of sites

CVE-2024-44648 | PHPGurukul Small CRM 3.0 quote-details.php id/adminremark sql injection

CVE-2024-44632 | PHPGurukul Student Record System 3.20 password-recovery.php id/emailid sql injection

CVE-2024-45431 | OpenSynergy BlueSDK up to 6.x input validation

Last Week’s Critical PHP Warning Was the Tip of the Web Vulnerability Iceberg

secprbench

IT Security News Hourly Summary 2026-10-27 19h : 23 posts

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

CVE-2025-63334 | PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 POST Parameter submit_opacity.php opacityValue os command injection

CVE-2025-52910 | Samsung Mobile Processor/Wearable Processor Exynos up to 2400 GPU use after free

CVE-2025-60925 | codeshare 1.0.0 information disclosure

php2shell: Erfolgreiche Angriffe auf PHP-Schwachstelle bestätigt | heise online

CVE-2025-60319 | PerfreeBlog 4.0.11 API Endpoint AttachController.java uploadAttachByUrl authorization

CVE-2025-60355 | zhangyd-c OneBlog up to 2.3.8 FreeMarker Template special elements in template engine

CVE-2024-38564 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 bpf type confusion (Nessus ID 209785 / WID-SEC-2024-1418)

Sicherheitslücken (CVE)

Bugün

ANALYST WORKBENCH

Bülten kayıtları nasıl çalışır?

Bülten nasıl iptal edilir?