Sec Feed Reader

Full Disclosure

Uebersicht

Quellen-ID (source_id): full_disc
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	"3e3d-65e4a728c4474"	Tue, 20 Oct 2026 19:15:02 GMT

Letzte Eintraege

306 Eintraege · 50 pro Seite · Seite 5 von 7

Veroeffentlicht	Titel	CVEs	Severity
2026-08-06 19:27	APPLE-SA-07-27-2026-2 macOS Tahoe 26.6	—	-
2026-08-06 19:27	APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6	—	-
2026-08-06 19:26	Skullcandy Dime 3 unauthorized Bluetooth pairing behavior	CVE-2025-20701	HIGH
2026-08-06 19:25	Cisco Catalyst SD-WAN C8000V Authenticated Heap Buffer Overflow	—	-
2026-08-06 19:23	batch-2: 15 vulnerabilities incl. multiple pre-auth RCE across 10 enterprise/SCADA products - full analyses + reproducible exploits	—	-
2026-08-06 19:23	Security advisory: multiple vulnerabilities including Pre-authentication root RCE in Xeams 10.3 build 6449 (Synametrics Technologies)	—	-
2026-08-06 19:23	Security advisory: Pre-authentication RCE in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd)	—	-
2026-08-06 19:23	Security advisory: Pre-authentication SYSTEM RCE in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon Industries)	—	-
2026-08-06 19:23	Security advisory: Pre-authentication RCE in Plastic SCM (Unity Version Control On-Prem) 11.0.16.10303 (Unity Technologies)	—	-
2026-08-06 19:23	Security advisory: Pre-authentication SYSTEM RCE in Stimulsoft Server 2026.3.1 (Stimulsoft)	—	-
2026-08-06 19:23	Security advisory: multiple vulnerabilities including JWT forgery / authentication bypass, Pre-authentication SYSTEM RCE in CIRCUTOR PowerStudio SCADA WAVE 24.11.6.0 (CIRCUTOR S.A.)	—	-
2026-08-06 19:23	Security advisory: multiple vulnerabilities including Authenticated RCE (property injection), Hardcoded credentials, Pre-authentication root RCE in CatDV Server 10.7.8 (Square Box Systems)	—	-
2026-08-06 19:23	Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)	—	-
2026-07-23 02:03	A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits	—	-
2026-07-23 02:02	Synology stale DNS allows practical interception of traffic from vulnerable DSM clients	—	-
2026-07-23 02:02	Amplitude customers using domain proxies should update their configuration immediately.	—	-
2026-07-21 05:41	ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver	CVE-2026-13585	HIGH
2026-07-21 05:40	New Release: UFONet v2.0 - "R3DST4R!"...	—	-
2026-07-21 05:40	XSSer v.1.9 - "Bl4ck Swarm!" released	—	-
2026-07-21 05:35	NotCVE registry index — public records of vulnerabilities that shipped without a CVE	—	-
2026-07-16 04:43	[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure	CVE-2026-14440	HIGH
2026-07-16 04:42	Subject: Advisory Submission: EZ Game Booster - Cleartext Storage of Sensitive Credentials (CWE-312)	—	-
2026-07-16 04:41	CVE-2026-56877 - Skillable SCORM userId authorisation bypass	CVE-2026-56877	MEDIUM
2026-07-09 05:36	[REVIVE-SA-2026-003] Revive Adserver Vulnerabilities	—	-
2026-07-07 06:39	OPNsense XPATH Injection (CVE-2026-53582)	CVE-2026-53582	-
2026-07-07 06:38	SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+	—	-
2026-07-02 18:40	Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties	—	-
2026-07-02 18:40	OpenBlow Multiple Deanonymization Vulnerabilities	—	-
2026-07-02 18:40	Whistlelink: Site-access password exposed in web server access logs via GET query string	—	-
2026-07-02 18:25	APPLE-SA-06-29-2026-3 Safari 26.5.2	—	-
2026-07-02 18:25	APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2	—	-
2026-07-02 18:25	APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2	—	-
2026-07-02 18:25	pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root	CVE-2026-56815	HIGH
2026-07-02 18:22	[KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability	—	-
2026-07-02 18:22	[fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln	CVE-2026-58451	HIGH
2026-07-02 18:12	Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)	—	-
2026-07-02 18:10	Asterisk Security Release 23.4.1	—	-
2026-07-02 18:10	Asterisk Security Release 22.10.1	—	-
2026-07-02 18:10	Asterisk Security Release 21.12.3	—	-
2026-07-02 18:10	Asterisk Security Release 20.20.1	—	-
2026-07-02 18:10	Certified Asterisk Security Release certified-22.8-cert3	—	-
2026-07-02 18:10	Certified Asterisk Security Release certified-20.7-cert11	—	-
2026-07-02 18:09	Zig std.http chunked reader integer overflow -> unauthenticated remote DoS	—	-
2026-06-21 03:54	OpenBSD mpls_do_error: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read	CVE-2026-56099	MEDIUM
2026-06-21 03:54	OpenBSD sppp_pap_input: PAP authentication bypass	—	-
2026-06-21 03:51	SEC Consult SA-20260618-0 :: Hardcoded Root Cloud Credentials in Application Binaries in Silver Leaf Technologies - Worksnaps.net Worksnaps	CVE-2025-10560	CRITICAL
2026-06-21 03:51	SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4	CVE-2026-11857 CVE-2026-11858	HIGH
2026-06-21 03:51	SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3	CVE-2022-4332 CVE-2022-4333 CVE-2025-41741	CRITICAL
2026-06-21 03:51	SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225	CVE-2026-12225	HIGH
2026-06-21 03:51	APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211	—	-

Alle Quellen