EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
YouTube Security VideosAMD: Leadership I/O for Agentic AI Workloads(05.11.2026 um 22:38 Uhr)
•
YouTube Security VideosMicrosoft Azure: Unlocking Media Archives with Agentic Intelligence | Support Partners(05.11.2026 um 22:00 Uhr)
•
YouTube Security VideosGoogle: Happy Hunger Games 🐍(05.11.2026 um 21:59 Uhr)
•
YouTube Security VideosGoogle Workspace: Video generation in Google Vids just leveled up 🎬 #Shorts(05.11.2026 um 23:08 Uhr)
•
Windows Tipps & SecurityMicrosoft is betting on native WinUI over web app slop across Windows 11, and even Color Picker and Text Extractor have moved to it in PowerToys(05.11.2026 um 22:00 Uhr)
•
Windows Tipps & SecurityTake a closer look at Discord's faster, lighter desktop app(05.11.2026 um 22:09 Uhr)
•
Windows ServerHoster Mittwald Opfer eines Cyberangriffs (5.11.2026)Borns IT - BornCity(05.11.2026 um 21:49 Uhr)
•
Windows ServerXbox Cloud Gaming: Nano-Controller funkt direkt zum Server - ComputerBase(05.11.2026 um 22:23 Uhr)
•
Windows ServerMicrosoft setzt KI ein, um mehr Windows-Sicherheitslücken zu schließen, während die Patch ...(05.11.2026 um 23:05 Uhr)
•
Web Security TippsGemini Omni 1.2 Flash now in Vids with 15-second generations and improved quality(05.11.2026 um 21:24 Uhr)
•
GLOBAL5.1CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff(27.10.2026 um 01:15 Uhr)
•
GLOBAL8.8CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.(27.10.2026 um 00:48 Uhr)
•
GLOBAL6.9CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.(27.10.2026 um 00:45 Uhr)
•
GLOBAL8.8CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.(27.10.2026 um 00:44 Uhr)
•
GLOBAL6.3CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL8.7CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.8CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.(27.10.2026 um 00:34 Uhr)
•
GLOBAL6.9CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.(27.10.2026 um 00:33 Uhr)
•
GLOBAL6.9CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.(27.10.2026 um 00:33 Uhr)
•
YouTube Security VideosAMD: Leadership I/O for Agentic AI Workloads(05.11.2026 um 22:38 Uhr)
•
YouTube Security VideosMicrosoft Azure: Unlocking Media Archives with Agentic Intelligence | Support Partners(05.11.2026 um 22:00 Uhr)
•
YouTube Security VideosGoogle: Happy Hunger Games 🐍(05.11.2026 um 21:59 Uhr)
•
YouTube Security VideosGoogle Workspace: Video generation in Google Vids just leveled up 🎬 #Shorts(05.11.2026 um 23:08 Uhr)
•
Windows Tipps & SecurityMicrosoft is betting on native WinUI over web app slop across Windows 11, and even Color Picker and Text Extractor have moved to it in PowerToys(05.11.2026 um 22:00 Uhr)
•
Windows Tipps & SecurityTake a closer look at Discord's faster, lighter desktop app(05.11.2026 um 22:09 Uhr)
•
Windows ServerHoster Mittwald Opfer eines Cyberangriffs (5.11.2026)Borns IT - BornCity(05.11.2026 um 21:49 Uhr)
•
Windows ServerXbox Cloud Gaming: Nano-Controller funkt direkt zum Server - ComputerBase(05.11.2026 um 22:23 Uhr)
•
Windows ServerMicrosoft setzt KI ein, um mehr Windows-Sicherheitslücken zu schließen, während die Patch ...(05.11.2026 um 23:05 Uhr)
•
Web Security TippsGemini Omni 1.2 Flash now in Vids with 15-second generations and improved quality(05.11.2026 um 21:24 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence

Cybersecurity News & IT-Sicherheit

1.001 Bildirimler
LIVE …
Bütün Bütün Hepsi (1.001) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaction
Son Önemli Signals
1.001 Bildirimler
Platform çapında arama ↗

Bugün

Güvenlik açıkları (CVE) VulDB Updates

CVE-2025-60892 | Raspberry RPI Imager 1.9.6 on Windows id_rsa.pub improper authentication (Issue 1185)

A vulnerability has been found in Raspberry RPI Imager 1.9.6 on Windows and classified as critical.

🛡️ CVE-2025-60892 Medium 6.8 Sicherheitslücken (CVE) 100%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Slashdot

Discord Is Ditching Electron For Rust

Discord is replacing Electron with a desktop client built fully in Rust, which the company says should significantly reduce the app's notoriously…

IT Nachrichten 75%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Latest from TechRadar

Apple set to slash employee AI token spending as new CEO John Ternus looks to cut costs

Apple is reportedly cutting AI budgets per workerDevelopers will still likely have more than other workersModel choice and hosting provider could be…

Cloud & IT-Enterprise Apple iOS & macOS 76%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri IT Security News

Infostealers Expose 72% of Organizations: Why One Login Matters

Outpost24 found infostealer-related credential exposure at 72% of organizations studied.

Malware / Trojaner / Viren 78%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri IT Security News

Bring a tent, I’ve got the coffee: Lessons from it-sa

Thorsten may have had to camp out in Nuremberg to attend it-sa, but the real story is the initiative to add a formal IT Security apprenticeship…

IT Security Video 76%
vor 3 Std. 1 Min
0
Daha fazla oku
1 başka bir kaynak
Cisco Talos Blogvor 3 Std.Bring a tent, I've got the coffee: Lessons from it-sa
IT Güvenlik Haberleri IT Security News

CISA flags WordPress RCE flaw as actively exploited

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning that attackers are actively exploiting a recently patched…

TA0001 · T1190 Sicherheitslücken (CVE) 77%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri IT Security News

China-Aligned Group Abuses Sogou Input Method to Deliver Malware

SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel This article has been indexed from…

IT Nachrichten 75%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri IT Security News

US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers

A joint U.S. government statement says the hacks are affecting the food, transportation, and healthcare industries after reports of global…

Gesundheitswesen Gov & Defense IT Nachrichten 75%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri The Verge

Muse has a voice mode now

Meta now lets you have voice conversations with your Muse AI agent in real time, CEO Mark Zuckerberg announced today.

IT Nachrichten 75%
vor 3 Std. 1 Min
0
Daha fazla oku
1 başka bir kaynak
AI | The Vergevor 3 Std.Muse has a voice mode now
IT Güvenlik Haberleri IT Security News

The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

Introduction to BOD 26-04 On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk.

IT Security Video 74%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri IT Security News

mSecure Warns Customers to Change Passwords After Security Incident

mSecure urges customers to protect passwords, 2FA secrets and passkeys after a security incident.

vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Borns IT- und Windows-Blog

Hoster Mittwald Opfer eines Cyberangriffs (5.11.2026)

Der Hoster Mittwald hat am 5. November 2026 gegen 11:34 Uhr den Zugriff auf sein Kundenportal mStudio (Login und alle SSH-Verbindungen) aus…

Server Security 71%
vor 3 Std. 1 Min
0
Daha fazla oku
Windows İpuçları ve Güvenlik Latest from Windows Central

Call of Duty: MW4 no longer demands VRR on Xbox for optimal performance

In the lead-up to Call of Duty: Modern Warfare 4's release, the developers made the controversial announcement that the console versions would…

Windows Tipps & Security 92%
vor 3 Std. 1 Min
0
Daha fazla oku
Apple iOS ve macOS Setapp Blog RSS

Best free AI tools for Mac: 6 apps you can try on Setapp

Apple iOS & macOS 89%
vor 3 Std. 1 Min
0
Daha fazla oku
YouTube Güvenlik Videoları

Neil Patel: 22 AI Tasks That Give You Your Week Back

Most businesses use AI for the wrong things. The real payoff is the boring work that eats your evenings. Sales call notes.…

YouTube Security Videos 99%
vor 3 Std. 124 Views
0
Daha fazla oku
IT Haberleri SD Times

Kiro introduces Kiro Bots, goal-oriented agents

In a major development for software engineering teams, Kiro has officially announced the general availability of Kiro bots within Kiro Crew.

Admin & Dev Tools 73%
vor 3 Std. 1 Min
0
Daha fazla oku
1 başka bir kaynak
InfoWorldvor 3 Std.AWS launches Kiro bots to help devs coordinate AI coding agents
Apple iOS ve macOS MacDailyNews

Apple TV debuts new trailer for ‘Bad Monkey’ season two, premiering December 2nd

Apple TV’s comedy “Bad Monkey” returns to Apple TV for season two on December 2, 2026.

Apple iOS & macOS 93%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri

IT Security News Hourly Summary 2026-11-05 20h : 24 posts

24 posts published in the last hour 18:35Silk Road – Ross Ulbricht Put His Real Gmail in a Job Ad 18:34Canadian extradited for university…

KRITIS / Energie IT Security 80%
vor 3 Std. 1 Min
0
Daha fazla oku
Güvenli Programlama DZone.com Feed

How to Evaluate Coding Agents With Harbor Framework, Python, Docker

AI coding agents can write a working FastAPI endpoint in seconds, refactor a module, or track down a bug across a few files.

Sichere Programmierung 75%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Caschys Blog

GeForce NOW: Hogwarts Legacy bekommt DLSS 5 und 24 neue Spiele im November

Nvidia füllt im November wieder die Cloud-Bibliothek von GeForce NOW auf.

Cloud & IT-Enterprise Alle Kategorien 65%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Güvenlik Haberleri WinFuture News

Erst kein Glück, dann kam Pech dazu: Blue-Origin-Start verschoben

Explosion, schlechtes Wetter und nun noch Sturzfluten: Blue Origin kämpft beim Wiederaufbau der beschädigten Startanlage mit Hindernissen.

vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Latest from TechRadar

Stellar Blade for Nintendo Switch 2 review: more solid than stellar

The over-the-top, action-heavy, ultra-stylish Stellar Blade has landed on Nintendo Switch 2, giving this ex-PS5 exclusive a chance to shine in front…

IT Nachrichten 75%
vor 3 Std. 1 Min
0
Daha fazla oku
Android İpuçları ve Güvenlik - Futurezone

WhatsApp: Neue Vorschau soll für Android einen praktischen Vorteil bringen

Messenger-Dienste entwickeln sich ständig weiter und erhalten regelmäßig neue Funktionen.

Android Tipps & Security 99%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri heise online News

Top 10: Der beste E-Scooter im Test – Testsieger mit 2400 W, Pendler-Tipp 439 €

Der Testsieger zieht mit 2400 W brachial los, der Pendler-Tipp von Ninebot wiegt nur 17,9 kg.

IT Nachrichten 75%
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Engadget

Google, Meta and TikTok are all suing California to block social media law intended to help kids

Assembly Bill 1709 demands that platforms remove "psychologically exploitative features."

Hacking & Pentesting 71%
vor 3 Std. 1 Min
0
Daha fazla oku
Apple iOS ve macOS ifun.de

Logitech Zone Vibe Pro ausprobiert: Guter Klang, viel Kunststoff

Mit den Zone Vibe Pro will Logitech einen Kopfhörer anbieten, der den ganzen Tag über zum Einsatz kommt.

Apple iOS & macOS 88%
vor 3 Std. 1 Min
0
Daha fazla oku
Yapay Zekâ ve AI Haberleri Artificial Intelligence

Second Lawsuit Filed Over Alabama Data Center Deal

The massive, hyperscale AI data center campus being developed in Lowndes County is getting more pushback with critics asking a judge to invalidate…

KRITIS / Energie Cloud & IT-Enterprise
vor 3 Std. 1 Min
0
Daha fazla oku
IT Haberleri Computerworld

Smartsheet’s new AI tool tracks corporate strategies, suggests fixes

Work management software vendor Smartsheet has launched a new tool to help executives oversee company-wide strategies, with AI agents that monitor…

IT Security Tools 73%
vor 3 Std. 1 Min
0
Daha fazla oku
1 başka bir kaynak
Computerworldvor 3 Std.Smartsheet’s new AI tool tracks corporate strategies, suggests fixes
YouTube Güvenlik Videoları

.NET Foundation: .NET MAUI Community Toolkit Monthly Standup, November 2026

Join us as we discuss the current happenings in the .NET MAUI Community Toolkit!…

YouTube Security Videos 96%
vor 3 Std. 1 Min
0
Daha fazla oku
1 başka bir kaynak
.NET Foundationvor 3 Std..NET Foundation: .NET MAUI Community Toolkit Monthly Standup, November 2027
Apple iOS ve macOS ZDNET

How I use my Apple Watch to identify a song fast – without opening Shazam

The improved Music Recognition feature means you no longer have to tap into Shazam to recognize songs on your Apple Watch.

Apple iOS & macOS 98%
vor 3 Std. 1 Min
0
Daha fazla oku
YouTube Güvenlik Videoları

Google: Search “Ocarina of Time” to test if you’re a true Hero of Time 🗡️

See what happens when you enter it in the search bar ✨ @NintendoAmerica

YouTube Security Videos 97%
vor 3 Std. 1.1k Views
0
Daha fazla oku
️ Hunter Status Update
Community Stream
News-Deck 📖 0 · ⏭ 0 · 🗳️ 0

Kartlar yüklenir ..

Yüksek = Preview · Doğru = · Left/Down = Back · Enter/Type Card = Preview · V = Voting

Auto-Newslider · Sliders
Tüm Değişimi Değiştirin
Visible kartlar

Otomatik haberlider: ok anahtarlarını sol ve sağ, otomatik duraklar odak ve kaydırıcı jestler

Canlı sinyal akışı 0 Signals
İlk sinyalleri bekleyin..
Source View 24 Kaynaklar

Bu kategorinin son 14 gününde (altınlar dahil).

- Futurezone 258
Son katkı: 05.11.2026 um 20:22 Uhr
Mesajları göster (5)
AI - Ars Technica 27
Son katkı: 05.11.2026 um 13:00 Uhr
BASIC thinking 15
Son katkı: 02.11.2026 um 19:00 Uhr
AI Revolution 12
Son katkı: 05.11.2026 um 01:22 Uhr
RSS
AI News 11
Son katkı: 05.11.2026 um 10:45 Uhr
RSS
Arena 10
Son katkı: 05.11.2026 um 15:00 Uhr
Apple Newsroom 9
Son katkı: 03.11.2026 um 19:24 Uhr
Alberta Tech 7
Son katkı: 04.11.2026 um 19:07 Uhr
RSS
Atlassian 7
Son katkı: 02.11.2026 um 19:35 Uhr
ANY.RUN's Cybersecurity Blog 6
Son katkı: 05.11.2026 um 10:34 Uhr
Android Developers' Blog 6
Son katkı: 05.11.2026 um 01:00 Uhr
0 Makaleler kaydedildi
Kaydedilmiş makale yok.
Eklemek için bir haber üzerindeki simgesine tıklayın.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken