Sec Feed Reader

Full Disclosure

Uebersicht

Quellen-ID (source_id): full_disc
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	"3e3d-65e4a728c4474"	Tue, 20 Oct 2026 19:15:02 GMT

Letzte Eintraege

306 Eintraege · 50 pro Seite · Seite 3 von 7

Veroeffentlicht	Titel	CVEs	Severity
2026-09-04 00:13	Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure	—	-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API	—	-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read	—	-
2026-09-04 00:13	Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server	—	-
2026-09-04 00:13	Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server	—	-
2026-09-04 00:13	WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf	—	-
2026-09-04 00:13	thttpd v2.26 Stack-Based Buffer Overflow in thttpd redirect CGI Program	—	-
2026-09-04 00:12	Paho v1.3.15 Arbitrary Code Execution via Shared Library Search Path Hijacking	—	-
2026-09-04 00:11	[0day-rubbish] ZesleCP 3.1.21 Authenticated arbitrary file write to root RCE via cron (8.8)	—	-
2026-09-04 00:11	[0day-rubbish] StreamSets DataCollector 6.4.1 (official Docker image) Default credentials plus unsandboxed Shell Executor to root RCE (9.8)	—	-
2026-09-04 00:11	[0day-rubbish] Puppet Enterprise 2025.10.0 Authenticated command injection to root RCE (patch-bypass variant of CVE-2025-5459) (8.8)	CVE-2025-5459	HIGH
2026-09-04 00:11	[0day-rubbish] NoMachine Terminal Server 10.0.57 two vulnerabilities	—	-
2026-09-04 00:11	[0day-rubbish] Minuteman UPS Network Management Card 1.60.3 Unauthenticated OS command injection to root RCE (9.8)	—	-
2026-09-04 00:11	[0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities	—	-
2026-09-04 00:11	[0day-rubbish] GeoVision GV-TBL4700 V1.06 Authenticated command injection to root RCE via SNMPv3 user configuration (8.8)	—	-
2026-09-04 00:11	[0day-rubbish] DrayTek Vigor 2960 v1.5.1.6 Authenticated command injection to root RCE in uploadlangs (8.8)	—	-
2026-09-04 00:11	[0day-rubbish] Codoforum 5.4.1 Authenticated arbitrary file upload to PHP RCE (7.2)	—	-
2026-09-04 00:11	[0day-rubbish] Akana API Platform 8.4.29 Unauthenticated RCE via path-normalization filter/dispatcher discrepancy (9.8)	—	-
2026-09-04 00:10	Acunetix 25.11.x - Local Privilege Escalation Vulnerability via OpenSSL Configuration (CVE-2026-6958)	CVE-2026-6958	HIGH
2026-08-30 06:19	CyberDanube Security Research 20260611-0 \| Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series	CVE-2026-29115 CVE-2026-29116	HIGH
2026-08-30 06:19	Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)	CVE-2025-70290 CVE-2025-70291 CVE-2025-70292 +1	CRITICAL
2026-08-30 06:18	[ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)	CVE-2025-70290 CVE-2025-70291 CVE-2025-70292 +1	CRITICAL
2026-08-30 06:17	JSON Deserialiser Unconstrained Resource Consumption Proof of Concept	—	-
2026-08-30 06:16	Dovecot Security Advisory 3/2026	—	-
2026-08-26 16:46	FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)	CVE-2026-65053	MEDIUM
2026-08-26 16:46	[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File	—	-
2026-08-26 16:46	[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records	—	-
2026-08-26 16:46	[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service	—	-
2026-08-26 16:46	[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM	—	-
2026-08-26 16:46	[NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write	—	-
2026-08-26 15:30	Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure	—	-
2026-08-26 15:30	Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path	—	-
2026-08-26 15:30	Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow	—	-
2026-08-26 15:30	UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing	—	-
2026-08-26 15:30	Realtek edimax 52fc10d19 In-Band Ioctl Response Length Confusion Causes Heap Buffer Overflow	—	-
2026-08-26 15:30	WatsonWebserver v7.1.0 HTTP/1 Chunked Request Processing Bypasses MaxRequestBodySize	—	-
2026-08-26 15:30	Chronicle Wire v2026.8 Arbitrary Class Instantiation During YAML Deserialization via Externally Controlled YAML Type Tags	—	-
2026-08-26 15:30	Chronicle Wire v2026.8 Insecure Reflection Allows Unvalidated Method Invocation	—	-
2026-08-26 15:30	Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection	—	-
2026-08-26 15:29	Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation	CVE-2025-13293 CVE-2025-13294 CVE-2025-15680 +3	CRITICAL
2026-08-26 15:28	[0day-rubbish] VitalPBX 4.5.2 (Asterisk 20.20.1) Authenticated root RCE via asterisk_cli to dialplan System() (8.8)	—	-
2026-08-26 15:28	[0day-rubbish] Seeq Server R65.2.3 (default deployment with Data Lab installed via the official CLI) Unauthenticated RCE (open self-registration + Data Lab Jupyter missing authorization) (9.8)	—	-
2026-08-26 15:28	[0day-rubbish] Raritan EMX firmware emx_ecx_3.6.1_46982 (EMX/ECX gateway) Authenticated config injection to root RCE (8.8)	—	-
2026-08-26 15:28	[0day-rubbish] mySCADA PRO Runtime 9.4.0 (container deployment msxrun; earlier versions with the same upgrade branch are likely affected) Unauthenticated OS command injection to root RCE (9.4)	—	-
2026-08-26 15:28	[0day-rubbish] Maian Gallery v2.1 Authenticated unrestricted file upload to PHP RCE (7.2)	—	-
2026-08-26 15:28	[0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8)	—	-
2026-08-26 15:28	[0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8)	—	-
2026-08-26 15:28	[0day-rubbish] Microsip 2026 (ASD data-service agent) 2026 Eval (other builds with the same backup-runner path handling are likely affected) Pre-authentication RCE (attacker-controlled binary path, LocalSystem) (9.8)	—	-
2026-08-26 15:28	[0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8)	CVE-2024-54448	HIGH
2026-08-26 15:28	[0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8)	—	-

Alle Quellen