ARTIKEL SUCHE
Threat Feed QueryDurchsuche alle aggregierten Security-Artikel nach Schlagworten, CVE-IDs und Quellen.
13-Minute WindRelay Malware Attack Uses SpyNote RAT and NFC Relay Malware to Drain Victim Accounts
A new Android fraud operation shows how quickly a convincing phone call…
New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones
A newly discovered Android malware family named Manic combines banking fraud with…
CVE-2026-78078 - Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
CVE ID :CVE-2026-78078 Published : Aug. 31, 2026, 2:17 p…
CVE-2026-85432 - MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
CVE ID :CVE-2026-85432 Published : Sept. 3, 2026, 11:17 p…
CVE-2026-16272 - Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
CVE ID :CVE-2026-16272 Published : 9. September 2026 08:17 | 41…
CVE-2025-71057 - D-Link Wireless N 300 ADSL2+ Modem Router Session Hijacking Vulnerability
CVE ID : CVE-2025-71057 Published : Feb. 26, 2026, 4:23 p…
[Low] CVE-2026-29114 – A vulnerability has been found in some Dahua products. An attacker may obtain th...
Low CVE-2026-29114 A vulnerability has been found in some Dahua…
Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts
Microsoft has shut down a long-running malicious extension operation on the…
CVE-2026-12281 - Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing
CVE ID :CVE-2026-12281 Published : July 15, 2026, 6:16 a…
CVE-2026-18248 - @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header
CVE ID :CVE-2026-18248 Published : Aug. 3, 2026, 3:20 p…
CVE-2026-84353 - Google Chrome Shared Tab Groups Use-After-Free Vulnerability
CVE ID :CVE-2026-84353 Published : Sept. 2, 2026, 12:18 a…
CVE-2026-108905 - pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
CVE ID :CVE-2026-108905 Published : Oct. 11, 2026, 3:16 p…
CVE-2026-86009 - Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not control
CVE ID :CVE-2026-86009 Published : Oct. 16, 2026, 5:17 p…
CVE-2026-40575 - OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing
CVE ID :CVE-2026-40575 Published : April 22, 2026, 12:16 a…
CVE-2026-10140 - Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem
CVE ID :CVE-2026-10140 Published : June 30, 2026, 7:55 p…
CVE-2026-76356 - Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR
CVE ID :CVE-2026-76356 Published : Aug. 19, 2026, 10:17 p…
CVE-2026-91039 - dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover
CVE ID :CVE-2026-91039 Published : Sept. 17, 2026, 3:19 p…
CVE-2026-100390 - Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6
CVE ID :CVE-2026-100390 Published : Sept. 25, 2026, 9:17 p…
CVE-2026-96838 - WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE ID :CVE-2026-96838 Published : 30. September 2026 13:17 | 1…
CVE-2026-108549 - cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
CVE ID :CVE-2026-108549 Published : Oct. 10, 2026, 3:16 p…