Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13369 Eintraege gefunden · 50 pro Seite · Seite 97 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	Kategorie
2026-08-26 16:30	golem_security	(g+) Opinion Business Insight: AI has opened up big holes in cyber security	-	—	security_news
2026-08-26 16:14	golem_security	Hackerangriff auf Senatsverwaltungen: Berlin räumt Abfluss weiterer Daten ein	-	—	security_news
2026-08-26 15:58	sans_isc	Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)	-	—	security_news
2026-08-26 15:35	thn_global	Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler	-	—	security_news
2026-08-26 15:30	full_disc	Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure	-	—	threat_intel
2026-08-26 15:30	full_disc	Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path	-	—	threat_intel
2026-08-26 15:30	full_disc	Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow	-	—	threat_intel
2026-08-26 15:30	full_disc	UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing	-	—	threat_intel
2026-08-26 15:30	full_disc	Realtek edimax 52fc10d19 In-Band Ioctl Response Length Confusion Causes Heap Buffer Overflow	-	—	threat_intel
2026-08-26 15:30	full_disc	WatsonWebserver v7.1.0 HTTP/1 Chunked Request Processing Bypasses MaxRequestBodySize	-	—	threat_intel
2026-08-26 15:30	full_disc	Chronicle Wire v2026.8 Arbitrary Class Instantiation During YAML Deserialization via Externally Controlled YAML Type Tags	-	—	threat_intel
2026-08-26 15:30	full_disc	Chronicle Wire v2026.8 Insecure Reflection Allows Unvalidated Method Invocation	-	—	threat_intel
2026-08-26 15:30	full_disc	Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection	-	—	threat_intel
2026-08-26 15:29	full_disc	Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation	CRITICAL	CVE-2025-13293 CVE-2025-13294 CVE-2025-15680 +3	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] VitalPBX 4.5.2 (Asterisk 20.20.1) Authenticated root RCE via asterisk_cli to dialplan System() (8.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] Seeq Server R65.2.3 (default deployment with Data Lab installed via the official CLI) Unauthenticated RCE (open self-registration + Data Lab Jupyter missing authorization) (9.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] Raritan EMX firmware emx_ecx_3.6.1_46982 (EMX/ECX gateway) Authenticated config injection to root RCE (8.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] mySCADA PRO Runtime 9.4.0 (container deployment msxrun; earlier versions with the same upgrade branch are likely affected) Unauthenticated OS command injection to root RCE (9.4)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] Maian Gallery v2.1 Authenticated unrestricted file upload to PHP RCE (7.2)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] Microsip 2026 (ASD data-service agent) 2026 Eval (other builds with the same backup-runner path handling are likely affected) Pre-authentication RCE (attacker-controlled binary path, LocalSystem) (9.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8)	HIGH	CVE-2024-54448	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	[0day-rubbish] Brekeke PBX 3.19.1.8 (other versions with the same Bean dispatch model are likely affected) Pre-authentication RCE (fail-open auth gate + reflection to exec) (9.8)	-	—	threat_intel
2026-08-26 15:28	full_disc	CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication Bypass to Root RCE	CRITICAL	CVE-2026-20079	threat_intel
2026-08-26 15:27	full_disc	CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer	-	CVE-2026-78331 CVE-2026-78332	threat_intel
2026-08-26 15:26	tarnkappe	Hentai-Streaming: Portale für Streams und Download im August 2026	-	—	security_news
2026-08-26 15:26	full_disc	NVIDIA Linux GPU driver: unprivileged Xid 31 MMU fault via undocumented peer-teardown ordering, no CVE (vendor: intended)	-	—	threat_intel
2026-08-26 15:26	full_disc	NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)	-	—	threat_intel
2026-08-26 15:19	bleeping_c	Boston Scientific says cyberattack disrupted operations globally	-	—	security_news
2026-08-26 15:18	netzpolitik	Ethisches Hacken: Raus aus der Grauzone	-	—	security_news
2026-08-26 14:47	bleeping_c	Hackers target Microsoft SharePoint RCE chain with PoC exploit	-	—	security_news
2026-08-26 14:43	golem_security	KI-Pläne der Regierung: Klingbeil warnt vor "gefährlicher Ideologie" der Tech-Bros	-	—	security_news
2026-08-26 14:37	netzpolitik	Schattendatenbank: Datenschützer mahnen Schufa ab	-	—	security_news
2026-08-26 14:17	bleeping_c	FBI disrupts proxy network enabling Chinese espionage operations	-	—	security_news
2026-08-26 14:01	bleeping_c	Snowflake ends service-account passwords. Now comes the hard part	-	—	security_news
2026-08-26 14:00	security_insider	Externe Admins, interner Kontrollverlust	-	—	security_news
2026-08-26 13:44	thn_global	NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions	-	—	security_news
2026-08-26 13:17	bleeping_c	Ubiquiti patches three max severity security vulnerabilities	-	—	security_news
2026-08-26 13:07	thn_global	CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing	-	—	security_news
2026-08-26 12:58	netzpolitik	Postident mit AutoID: Deutsche Post trainiert ihre KI mit Ausweisfotos	-	—	security_news
2026-08-26 12:21	heise_sec	Kritische Schadcode-Lücken in Adobe-Anwendungen geschlossen	-	—	security_news
2026-08-26 12:17	hn_sec	Omarchy development practices lead to predictable security issues	-	—	security_news
2026-08-26 12:06	bleeping_c	Microsoft tests new privacy controls for Windows 11 desktop apps	-	—	security_news
2026-08-26 11:56	cert_bund	[NEU] [hoch] FreeBSD Project FreeBSD OS: Mehrere Schwachstellen	CRITICAL	CVE-2026-14457 CVE-2026-18798 CVE-2026-54874 +14	government_cert
2026-08-26 11:55	thn_global	Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code	HIGH	CVE-2026-19912 CVE-2026-19913	security_news
2026-08-26 11:51	cert_bund	[NEU] [mittel] OPNsense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen	MEDIUM	—	government_cert
2026-08-26 11:46	cert_bund	[NEU] [hoch] DNN: Mehrere Schwachstellen	HIGH	—	government_cert
2026-08-26 11:36	thn_global	Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine	-	—	security_news