Sec Feed Reader

Full Disclosure

Uebersicht

Quellen-ID (source_id): full_disc
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	"3e3d-65e4a728c4474"	Tue, 20 Oct 2026 19:15:02 GMT

Letzte Eintraege

306 Eintraege · 50 pro Seite · Seite 2 von 7

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-09-27 04:14	dive tar-slip in image file extraction	—		-
2026-09-27 04:14	usvg SVGZ decompression bomb in `Tree::from_data`	—		-
2026-09-27 04:13	openEQUELLA authenticated RCE chain(s)	—		-
2026-09-27 04:12	[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)	—		-
2026-09-27 04:12	[0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)	—		-
2026-09-27 04:12	[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)	—		-
2026-09-27 04:12	[0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)	—		-
2026-09-27 04:12	[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)	—		-
2026-09-27 04:12	SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education	—		-
2026-09-27 04:11	[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM	—		-
2026-09-27 04:11	[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory	—		-
2026-09-22 18:34	Code Security Review tool	—		-
2026-09-22 18:32	HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)	CVE-2026-89082 CVE-2026-89083 CVE-2026-89084		CRITICAL
2026-09-22 18:32	CFP No cON Name 2k26 - Palma, Mallorca - Spain	—		-
2026-09-22 18:32	CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)	CVE-2026-17613		HIGH
2026-09-22 18:31	CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)	CVE-2026-44756	0.7209	CRITICAL
2026-09-22 18:31	[0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)	—		-
2026-09-22 18:31	[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-10 Xcode 27	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-9 Safari 27	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-8 visionOS 27	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-7 watchOS 27	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-6 tvOS 27	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-5 macOS Sequoia 15.8	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-4 macOS Tahoe 26.7	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-3 macOS Golden Gate 27	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-2 iOS 26.7 and iPadOS 26.7	—		-
2026-09-22 18:31	APPLE-SA-09-14-2026-1 iOS 27 and iPadOS 27	—		-
2026-09-22 18:31	[0day-rubbish] Opengear NGCS 25.11.8 Authenticated PDU name command injection to root via io.popen (8.8)	—		-
2026-09-22 18:31	[0day-rubbish] LCDS Laquis SCADA Unauthenticated /uploade.html file write chained with CMDEXT*.DLL autoload (9.8)	—		-
2026-09-22 18:31	[0day-rubbish] Ecava IntegraXor IGX 16.0.701.10 Unauthenticated /FileUpload write chained to the dxmanager cmd.exe sink (9.8)	—		-
2026-09-22 18:31	[0day-rubbish] Devolutions Server (DVLS) 2026.2.14.0 PAM entitlement-gate bypass to SYSTEM PowerShell via the test-script endpoint (9.1)	—		-
2026-09-08 17:31	[0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2)	—		-
2026-09-08 17:31	[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)	—		-
2026-09-08 17:31	[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)	CVE-2025-34115		HIGH
2026-09-08 17:31	[0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8)	—		-
2026-09-08 17:31	[0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2)	—		-
2026-09-08 17:31	[0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8)	—		-
2026-09-08 17:31	[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)	—		-
2026-09-08 17:31	[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)	—		-
2026-09-08 17:30	Subject: CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)	CVE-2026-2035703		-
2026-09-08 17:24	CVE-2026-52307: Stored XSS in 1CMS v5.6	CVE-2026-52307		MEDIUM
2026-09-04 00:13	HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556	CVE-2026-12554 CVE-2026-12555 CVE-2026-12556		HIGH
2026-09-04 00:13	Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists	—		-
2026-09-04 00:13	O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script	—		-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion	—		-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery	—		-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read	—		-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution	—		-
2026-09-04 00:13	Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass	—		-

Alle Quellen