ARTIKEL SUCHE
Threat Feed QueryDurchsuche alle aggregierten Security-Artikel nach Schlagworten, CVE-IDs und Quellen.
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Cloned voices and synthetic video calls now show up in payment fraud…
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories
The internet never stays quiet. Every week, new hacks, scams, and security…
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories
The internet never stays quiet. Every week, new hacks, scams, and security…
CVE-2026-28474 - OpenClaw Nextcloud Talk < 2026.2.6 - Allowlist Bypass via actor.name Display Name Spoofing
CVE ID : CVE-2026-28474 Published : March 5, 2026, 10:16 p…
[Unknown] CVE-2026-11261 – Inappropriate implementation in PDF in Google Chrome prior to 149.0.7827.53 allo...
Unknown CVE-2026-11261 Inappropriate implementation in PDF in Google Chrome prior…
CVE-2026-40487 - Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS
CVE ID :CVE-2026-40487 Published : April 18, 2026, 2:16 a…
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories
Bad week. Turns out the easiest way to get hacked in 2026…
CVE-2026-48788 - Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
CVE ID :CVE-2026-48788 Published : June 16, 2026, 10:29 p…
CVE-2026-55641 - 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF
CVE ID :CVE-2026-55641 Published : July 10, 2026, 5:16 p…
CVE-2026-14321 - Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing
CVE ID :CVE-2026-14321 Published : Sept. 23, 2026, 6:17 a…
[Unknown] CVE-2026-11286 – Insufficient validation of untrusted input in Wallet in Google Chrome prior to 1...
Unknown CVE-2026-11286 Insufficient validation of untrusted input in Wallet in…
CVE-2026-18847 - IBM i is Affected By Multiple Vulnerabilities in Navigator for i
CVE ID :CVE-2026-18847 Published : Aug. 12, 2026, 5:17 p…
CVE-2026-92395 - @fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
CVE ID :CVE-2026-92395 Published : Sept. 16, 2026, 3:19 p…
CVE-2026-82827 - A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens
CVE ID :CVE-2026-82827 Published : Oct. 1, 2026, 5:17 a…
CVE-2026-27700 - Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo
CVE ID : CVE-2026-27700 Published : Feb. 25, 2026, 4:23 p…
CVE-2026-1490 - Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation
CVE ID : CVE-2026-1490 Published : Feb. 15, 2026, 4:15 a…
CVE-2026-90711 - proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
CVE ID :CVE-2026-90711 Published : Sept. 15, 2026, 7:16 a…
CVE-2026-76949 - Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement
CVE ID :CVE-2026-76949 Published : Sept. 17, 2026, 10:17 p…
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
This week starts small. A token leaks. A bad package slips in…
CVE-2026-55652 - Wekan: Header-login IP allowlist bypass via X-Forwarded-For spoofing in Wekan allows unauthenticated full account takeover (incl. admin)
CVE ID :CVE-2026-55652 Published : July 15, 2026, 10:17 p…