https://b3ncloud.net/ daily 1.0 2026-10-03 https://b3ncloud.net/news hourly 0.9 2026-10-03 https://b3ncloud.net/tools monthly 0.8 2026-10-03 https://b3ncloud.net/tools/ip-lookup monthly 0.7 2026-10-03 https://b3ncloud.net/tools/dns-lookup monthly 0.7 2026-10-03 https://b3ncloud.net/tools/ip-info monthly 0.7 2026-10-03 https://b3ncloud.net/tools/url-parser monthly 0.6 2026-10-03 https://b3ncloud.net/tools/http-status-codes monthly 0.6 2026-10-03 https://b3ncloud.net/tools/common-ports monthly 0.6 2026-10-03 https://b3ncloud.net/tools/ip-range-calculator monthly 0.6 2026-10-03 https://b3ncloud.net/tools/dns-leak-test monthly 0.7 2026-10-03 https://b3ncloud.net/search daily 0.7 2026-10-03 https://b3ncloud.net/breach-check monthly 0.7 2026-10-03 https://b3ncloud.net/leak-monitor monthly 0.7 2026-10-03 https://b3ncloud.net/phishing-check monthly 0.7 2026-10-03 https://b3ncloud.net/ioc monthly 0.7 2026-10-03 https://b3ncloud.net/ssl monthly 0.7 2026-10-03 https://b3ncloud.net/header monthly 0.7 2026-10-03 https://b3ncloud.net/cve-search weekly 0.8 2026-10-03 https://b3ncloud.net/vulnerability-check weekly 0.7 2026-10-03 https://b3ncloud.net/mitre weekly 0.7 2026-10-03 https://b3ncloud.net/intel daily 0.8 2026-10-03 https://b3ncloud.net/cheatsheets monthly 0.7 2026-10-03 https://b3ncloud.net/dkb weekly 0.7 2026-10-03 https://b3ncloud.net/security-checklist monthly 0.6 2026-10-03 https://b3ncloud.net/incident-response monthly 0.6 2026-10-03 https://b3ncloud.net/firewall-rules monthly 0.6 2026-10-03 https://b3ncloud.net/regex monthly 0.6 2026-10-03 https://b3ncloud.net/cron monthly 0.6 2026-10-03 https://b3ncloud.net/log-analyzer monthly 0.6 2026-10-03 https://b3ncloud.net/subnet monthly 0.6 2026-10-03 https://b3ncloud.net/troubleshooting monthly 0.6 2026-10-03 https://b3ncloud.net/stats daily 0.7 2026-10-03 https://b3ncloud.net/updates weekly 0.5 2026-10-03 https://b3ncloud.net/updates/feed.xml hourly 0.6 2026-10-03 https://b3ncloud.net/feed.xml hourly 0.6 2026-10-03 https://b3ncloud.net/cves/feed.xml hourly 0.6 2026-10-03 https://b3ncloud.net/impressum yearly 0.2 2026-10-03 https://b3ncloud.net/datenschutz yearly 0.2 2026-10-03 https://b3ncloud.net/article/41735 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers https://b3ncloud.net/article/41736 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-96451 - WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability https://b3ncloud.net/article/41730 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Fake Zoom installer hides macOS backdoor CloudSyncD https://b3ncloud.net/article/41731 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw https://b3ncloud.net/article/41732 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware https://b3ncloud.net/article/41729 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Danish university DTU breach exposes data of up to 200,000 people https://b3ncloud.net/article/41733 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-105115 - OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface https://b3ncloud.net/article/41734 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-103065 - WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability https://b3ncloud.net/article/41728 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-105105 - Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration https://b3ncloud.net/article/41726 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Muse Creates Detailed Profiles of All Your Friends and Family https://b3ncloud.net/article/41727 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Fortra Patches Critical Vulnerabilities in BoKS https://b3ncloud.net/article/41722 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed https://b3ncloud.net/article/41712 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel https://b3ncloud.net/article/41723 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 GitLab AI Gateway: Kritisches Update gegen mögliche Befehlsausführung https://b3ncloud.net/article/41724 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Zammad: Aktiv ausgenutzte Schwachstellen CVE-2026-102489 und CVE-2026-102490 erfordern sofortige Updates https://b3ncloud.net/article/41713 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71890 - MLS external commit can remove an arbitrary group member https://b3ncloud.net/article/41708 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Kritische Schwachstellen in Protokoll-Gateways und Apache Thrift: CVE-2026-86325 und CVE-2026-91135 https://b3ncloud.net/article/41714 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71885 - MLS X.509 credential not bound to the LeafNode signature key https://b3ncloud.net/article/41709 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Cisco IOS XE: Hardening-Release schließt kritische Schwachstellen in August 2026 https://b3ncloud.net/article/41710 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-19660: Kritische WordPress-Lücke in Divi Membership erlaubt Admin-Login ohne Anmeldung https://b3ncloud.net/article/41715 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71886 - OpenPGP certification accepted from a subkey without certification authority https://b3ncloud.net/article/41716 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71887 - OpenPGP data signature accepted from a signing subkey without cross-certification https://b3ncloud.net/article/41717 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71883 - Native AES packet cipher returns the raw AES key on an alias https://b3ncloud.net/article/41718 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71888 - CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent https://b3ncloud.net/article/41719 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-71889 - PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate https://b3ncloud.net/article/41711 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Netscaler-Admins aufgepasst: Zero-Day verursacht Crashes und Codeausführung https://b3ncloud.net/article/41720 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-92084 - Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output https://b3ncloud.net/article/41721 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-85515 - OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check https://b3ncloud.net/article/41704 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-18443 - Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter https://b3ncloud.net/article/41705 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-94505 - Nelio Content <= 4.5.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion via 'id' Parameter https://b3ncloud.net/article/41706 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-87115 - VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter https://b3ncloud.net/article/41739 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-88783 - Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content https://b3ncloud.net/article/41738 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-89236 - SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters https://b3ncloud.net/article/41737 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-91078 - TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN https://b3ncloud.net/article/41707 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-101923 - Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter https://b3ncloud.net/article/41701 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-97644 - Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Parameter (v3 /contacts) chained with v4 /emails/test https://b3ncloud.net/article/41702 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-92536 - Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Shortcode Injection via Nickname and Biographical Info Profile Fields https://b3ncloud.net/article/41698 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks https://b3ncloud.net/article/41699 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control https://b3ncloud.net/article/41696 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Citrix NetScaler Keeps Rebooting Following the 0-Day Patch https://b3ncloud.net/article/41697 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks https://b3ncloud.net/article/41692 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-105080 - ConvertX Arbitrary Code Execution https://b3ncloud.net/article/41703 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 Die Cyberangriffe der KW40/2026 im Überblick https://b3ncloud.net/article/41694 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-104433 - Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString https://b3ncloud.net/article/41693 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-104476 - Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive https://b3ncloud.net/article/41695 2026-10-03 weekly 0.7 B3ncloud.net de 2026-10-03 CVE-2026-73802 - Gitea act_runner Container Sandbox Escape Vulnerability https://b3ncloud.net/article/41683 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/41688 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94591 - Armatura LLC Armatura One Use of Hard-coded Cryptographic Key https://b3ncloud.net/article/41687 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94592 - Armatura LLC Armatura One Use of Hard-coded Credentials https://b3ncloud.net/article/41686 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94593 - Armatura LLC Armatura One Insertion of Sensitive Information into Log File https://b3ncloud.net/article/41685 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-95102 - Monta monta.app Missing Authentication for Critical Function https://b3ncloud.net/article/41684 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-97363 - Monta monta.app Improper Restriction of Excessive Authentication Attempts https://b3ncloud.net/article/41689 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-84411 - MikroTik RouterOS Integer Underflow https://b3ncloud.net/article/41672 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-102490 https://b3ncloud.net/article/41671 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-102489 https://b3ncloud.net/article/41673 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS) https://b3ncloud.net/article/41674 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82039 - UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter https://b3ncloud.net/article/41675 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-39718 - WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/41676 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104988 - Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject https://b3ncloud.net/article/41677 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104019 - OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio https://b3ncloud.net/article/41678 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82042 - UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter https://b3ncloud.net/article/41679 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82041 - UTMStack < 11.2.16 Missing Authorization via Command WebSocket https://b3ncloud.net/article/41659 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Trickreicher Angriff knackt RSA-Signaturen – ein bisschen https://b3ncloud.net/article/41680 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2020-37278 - Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile https://b3ncloud.net/article/41681 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2014-125130 - CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php https://b3ncloud.net/article/41660 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103958 - Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS https://b3ncloud.net/article/41661 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103957 - Server-side request forgery in the OAuth2 discovery handling in Loom for AWS https://b3ncloud.net/article/41662 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96940 - Microsoft Exchange Server Elevation of Privilege Vulnerability https://b3ncloud.net/article/41663 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103956 - Missing authentication for critical function in Loom for AWS https://b3ncloud.net/article/41657 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Frontline Education breach exposes school district employee data https://b3ncloud.net/article/41664 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2023-54405 - H3C CVM Unauthenticated File Upload via fileUpload/upload Token https://b3ncloud.net/article/41658 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Warlock ransomware breach SharePoint in water, telecom operator attacks https://b3ncloud.net/article/41665 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-102795 - Apache Traffic Server: SNI to Host header matching policy is not properly enforced https://b3ncloud.net/article/41649 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers https://b3ncloud.net/article/41650 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign https://b3ncloud.net/article/41666 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104854 - Nx daemon and plugin worker sockets are accessible to other local users https://b3ncloud.net/article/41668 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104848 - Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution https://b3ncloud.net/article/41667 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104849 - Tinypool: Prototype Pollution Gadget to RCE in run() options https://b3ncloud.net/article/41651 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes https://b3ncloud.net/article/41652 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104851 - fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution https://b3ncloud.net/article/41648 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 GitLab warns of critical RCE vulnerability in AI Gateway service https://b3ncloud.net/article/41653 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94483 - Next.js: Server-Side Request Forgery in Image Optimization https://b3ncloud.net/article/41682 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-51907 - TaskingAI QR Code Generator Plugin Path Traversal Vulnerability https://b3ncloud.net/article/41655 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104846 - Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) https://b3ncloud.net/article/41654 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104847 - ProseMirror: XSS vulnerability in prosemirror-view's paste handling https://b3ncloud.net/article/41656 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103648 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader https://b3ncloud.net/article/41632 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Mein Umzug auf einen neuen Passwort-Manager (Open Source) https://b3ncloud.net/article/41633 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-90970 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway https://b3ncloud.net/article/41626 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats https://b3ncloud.net/article/41627 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 AI Agents Attempt SQL Injection While Searching Government Data https://b3ncloud.net/article/41634 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94422 - xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape https://b3ncloud.net/article/41635 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-19652 - Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter https://b3ncloud.net/article/41725 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Rethinking automotive cyber risk for the age of accelerated vulnerability discovery https://b3ncloud.net/article/41628 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel https://b3ncloud.net/article/41629 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 The EDR blind spot: 3 ways browser attacks evade endpoint telemetry https://b3ncloud.net/article/41630 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CISOs sollen KI-Sicherheit ohne zusätzliche Ressourcen managen https://b3ncloud.net/article/41631 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials https://b3ncloud.net/article/41639 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96277 - Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception https://b3ncloud.net/article/41638 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96286 - Apache Thrift: Perl servers end `serve()` when serving one connection fails https://b3ncloud.net/article/41637 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96287 - Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) https://b3ncloud.net/article/41636 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96289 - Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard https://b3ncloud.net/article/41640 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94658 - Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) https://b3ncloud.net/article/41642 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94655 - Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic https://b3ncloud.net/article/41641 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94657 - Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound https://b3ncloud.net/article/41643 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94654 - Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame https://b3ncloud.net/article/41644 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-85476 - Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 https://b3ncloud.net/article/41645 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-83745 - Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D) https://b3ncloud.net/article/41647 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104610 - Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow https://b3ncloud.net/article/41646 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104611 - Tenda AC9 POST Request fast_setting_internet_set stack-based overflow https://b3ncloud.net/article/41596 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor https://b3ncloud.net/article/41597 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks https://b3ncloud.net/article/41598 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server https://b3ncloud.net/article/41599 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63772 - Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count https://b3ncloud.net/article/41600 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66055 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) https://b3ncloud.net/article/41601 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials https://b3ncloud.net/article/41602 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Dell asks admins to patch max severity CSM flaws as soon as possible https://b3ncloud.net/article/41603 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66081 - Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages https://b3ncloud.net/article/41604 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66837 - Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length https://b3ncloud.net/article/41605 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66858 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) https://b3ncloud.net/article/41606 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66859 - Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route https://b3ncloud.net/article/41607 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-83632 - Apache Thrift: C++ THttpTransport grows its line buffer without bound https://b3ncloud.net/article/41608 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-83663 - Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) https://b3ncloud.net/article/41612 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94653 - Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) https://b3ncloud.net/article/41611 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96288 - Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) https://b3ncloud.net/article/41610 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96292 - Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) https://b3ncloud.net/article/41609 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96294 - Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection https://b3ncloud.net/article/41616 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94636 - Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up https://b3ncloud.net/article/41615 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94637 - Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame https://b3ncloud.net/article/41614 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94646 - Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) https://b3ncloud.net/article/41613 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94648 - Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound https://b3ncloud.net/article/41619 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86537 - Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service https://b3ncloud.net/article/41618 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-87117 - Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec https://b3ncloud.net/article/41617 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-90440 - Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service https://b3ncloud.net/article/41622 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82458 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available https://b3ncloud.net/article/41621 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82459 - Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process https://b3ncloud.net/article/41620 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86535 - Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely https://b3ncloud.net/article/41624 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104471 - YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import https://b3ncloud.net/article/41623 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104472 - YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler https://b3ncloud.net/article/41562 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access https://b3ncloud.net/article/41563 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104286 https://b3ncloud.net/article/41564 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks https://b3ncloud.net/article/41565 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Crypto Scammers Hijack Microsoft’s Official X Account https://b3ncloud.net/article/41566 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak https://b3ncloud.net/article/41567 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report https://b3ncloud.net/article/41568 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users https://b3ncloud.net/article/41569 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 In Rare Move, Alleged Iranian State Hacker Extradited to US https://b3ncloud.net/article/41559 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features https://b3ncloud.net/article/41570 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96990 - Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound https://b3ncloud.net/article/41560 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Digiwin EasyFlow .NET: Zwei kritische Lücken erlauben Codeausführung und Passwortdiebstahl https://b3ncloud.net/article/41571 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94642 - Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception https://b3ncloud.net/article/41572 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94644 - Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound https://b3ncloud.net/article/41573 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94645 - Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound https://b3ncloud.net/article/41574 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94650 - Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) https://b3ncloud.net/article/41575 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94651 - Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error https://b3ncloud.net/article/41576 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-85493 - Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) https://b3ncloud.net/article/41577 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-85494 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language) https://b3ncloud.net/article/41578 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-91135 - Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) https://b3ncloud.net/article/41579 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86326 - Protocol Gateway Improper Cryptographic Signature Verification Vulnerability https://b3ncloud.net/article/41580 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-91137 - Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements https://b3ncloud.net/article/41581 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86325 - Protocol Gateway Account Management Interface Stack-Based Buffer Overflow https://b3ncloud.net/article/41585 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94541 - WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter https://b3ncloud.net/article/41584 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94634 - Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default https://b3ncloud.net/article/41583 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94635 - Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name https://b3ncloud.net/article/41582 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94639 - Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) https://b3ncloud.net/article/41586 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-80298 - SQL Injection in HAVELSAN's Sef - AI Chatbot Platform https://b3ncloud.net/article/41587 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93925 - Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id https://b3ncloud.net/article/41561 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Fortinet warnt vor aktiv ausgenutzter Path-Traversal-Lücke mit CVSS 9,8 https://b3ncloud.net/article/41588 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93926 - Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path https://b3ncloud.net/article/41589 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94633 - Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length https://b3ncloud.net/article/41540 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 „Immutability-Washing“ https://b3ncloud.net/article/41541 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA https://b3ncloud.net/article/41542 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data https://b3ncloud.net/article/41543 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks https://b3ncloud.net/article/41544 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Microsoft’s X account hacked in crypto pump-and-dump scheme https://b3ncloud.net/article/41545 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Kiteworks Patches 126 Vulnerabilities in Massive Security Update https://b3ncloud.net/article/41534 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Cloudflare Launches Free Certificate Authority for the Whole Internet https://b3ncloud.net/article/41590 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 1Password 7 ohne Cloud: Mac-Update streicht Browser-Plug-in https://b3ncloud.net/article/41535 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 OpenAI Blocks 15,000-User Campaign Trying to Extract Hidden AI Reasoning https://b3ncloud.net/article/41536 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 AI Agents Aimed SQL Injection at US and Canadian Government Sites https://b3ncloud.net/article/41546 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-97637 - JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response https://b3ncloud.net/article/41550 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63573 - Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap https://b3ncloud.net/article/41549 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63574 - Unbounded allocation from OpenPGP signature and user attribute subpacket lengths https://b3ncloud.net/article/41548 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63576 - URI name constraints checked against a mis-parsed host https://b3ncloud.net/article/41547 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63577 - Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix https://b3ncloud.net/article/41553 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-17507 - MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender https://b3ncloud.net/article/41552 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-18036 - NTRU leaks private key information by reducing secret values with a non-constant-time integer division https://b3ncloud.net/article/41551 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63571 - Attribute certificate path validation does not verify the attribute certificate's signature https://b3ncloud.net/article/41558 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103600 - Unbounded ASN.1 nesting depth causes process-terminating stack overflow https://b3ncloud.net/article/41557 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103601 - CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check https://b3ncloud.net/article/41556 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103602 - Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts https://b3ncloud.net/article/41555 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103603 - Unbounded HSS public key level count allows huge array allocation during signature verification https://b3ncloud.net/article/41554 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103604 - Quadratic-time escaping when converting X.509 distinguished names to strings https://b3ncloud.net/article/41537 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action https://b3ncloud.net/article/41538 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools https://b3ncloud.net/article/41539 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 OpenAI nimmt Ukraine in KI-Cyberabwehr-Programm auf https://b3ncloud.net/article/41516 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Treasury Sanctions Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in Losses https://b3ncloud.net/article/41517 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63569 - MTI/A0 DHAgreement does not validate the peer's ephemeral value https://b3ncloud.net/article/41519 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Cyberangriffe in der EU: Informationslücken erschweren Bekämpfung https://b3ncloud.net/article/41518 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Keeper Security und Sailpoint automatisieren privilegierte Zugriffe https://b3ncloud.net/article/41520 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63568 - Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion https://b3ncloud.net/article/41521 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63567 - IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) https://b3ncloud.net/article/41522 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63566 - DTLS handshake reassembler allocates buffer from unchecked 24-bit length https://b3ncloud.net/article/41523 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-16001 - IesEngine stream-mode MAC forgery via length-dependent KDF split https://b3ncloud.net/article/41524 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-16000 - KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used https://b3ncloud.net/article/41525 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-15999 - AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication https://b3ncloud.net/article/41526 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Angriffe auf FortiMail-Zero-Day-Lücke beobachtet https://b3ncloud.net/article/41512 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 USN-8816-4: Linux kernel (GKE) vulnerabilities https://b3ncloud.net/article/41527 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 USN-8818-6: Linux kernel (FIPS) vulnerabilities https://b3ncloud.net/article/41528 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93029 - WHM Stored Cross-Site Scripting https://b3ncloud.net/article/41529 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93697 - WHM Stored Cross-Site Scripting Vulnerability https://b3ncloud.net/article/41530 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93698 - Multilang Adminbin Command Injection https://b3ncloud.net/article/41513 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2024-58388 https://b3ncloud.net/article/41531 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-92820 - Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload https://b3ncloud.net/article/41532 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-15897 - Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login https://b3ncloud.net/article/41533 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-15896 - Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter https://b3ncloud.net/article/41514 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/41515 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes https://b3ncloud.net/article/41507 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Angreifer nutzen SharePoint-Schwach­stelle zur Codeausführung aus https://b3ncloud.net/article/41508 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-19660 - Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter https://b3ncloud.net/article/41509 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-14378 - DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow https://b3ncloud.net/article/41503 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63692 https://b3ncloud.net/article/41502 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63688 https://b3ncloud.net/article/41504 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Auslegungssache 169: Datenschutz in Videokonferenzen https://b3ncloud.net/article/41505 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Multiple Apache HTTP Server Vulnerabilities Could Enable Code Execution Attacks https://b3ncloud.net/article/41501 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical Fortinet FortiMail 0-Day Vulnerability Actively Exploited in Attacks https://b3ncloud.net/article/41506 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104480 - Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership https://b3ncloud.net/article/41511 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Geschwindigkeit als Gefahr: Neue Security-Herausforderungen https://b3ncloud.net/article/41510 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Netzwerkzugangskontrolle: NAC-Grundlagen und -Standards https://b3ncloud.net/article/41497 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86345 - 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result https://b3ncloud.net/article/41496 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-92370 https://b3ncloud.net/article/41495 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86131 https://b3ncloud.net/article/41500 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103764 - Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport https://b3ncloud.net/article/41499 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103765 - Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server https://b3ncloud.net/article/41498 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103766 - ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter https://b3ncloud.net/article/41700 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 DSA-6534-2 webkit2gtk - regression update https://b3ncloud.net/article/41670 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 DSA-6539-1 php-mongodb - security update https://b3ncloud.net/article/41669 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 DSA-6540-1 radsecproxy - security update https://b3ncloud.net/article/41591 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 DSA-6538-1 redis - security update https://b3ncloud.net/article/41485 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103761 - Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue https://b3ncloud.net/article/41486 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103760 - Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write https://b3ncloud.net/article/41487 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Fortinet warns of critical FortiMail flaw exploited in zero-day attacks https://b3ncloud.net/article/41488 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-71452 - Johnson Controls EasyIO FS32 OS Command Injection https://b3ncloud.net/article/41489 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-71449 - Johnson Controls EasyIO FS32 Hard-coded Cryptographic Key Vulnerability https://b3ncloud.net/article/41490 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-18397 - SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability https://b3ncloud.net/article/41492 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104051 - PictShare < 3.7.1 Sensitive Information Disclosure via info API https://b3ncloud.net/article/41491 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104356 - PictShare < 3.7.1 Predictable Delete Code via rand() https://b3ncloud.net/article/41493 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-96780 - figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width https://b3ncloud.net/article/41494 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104020 - Uncontrolled recursion in the Ion reader in Amazon Ion Python https://b3ncloud.net/article/41467 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Autonomous AI agents tried to hack US, Canadian government websites https://b3ncloud.net/article/41469 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-70650 - GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content https://b3ncloud.net/article/41468 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-71542 - GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php https://b3ncloud.net/article/41471 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-56660 - GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction https://b3ncloud.net/article/41470 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-56662 - GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request https://b3ncloud.net/article/41473 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-53953 - GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover https://b3ncloud.net/article/41472 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-54049 - Sakai Conversations has a Stored XSS Issue https://b3ncloud.net/article/41475 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability https://b3ncloud.net/article/41474 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-14984 - Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41476 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103484 - pgvector buffer overflow in IVFFlat index build https://b3ncloud.net/article/41478 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102628 - Cadmos LTI exposure of sensitive information via debug mode https://b3ncloud.net/article/41477 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102667 - Joyland AI WebView command injection https://b3ncloud.net/article/41479 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102514 - Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive https://b3ncloud.net/article/41480 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55396 - Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41481 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55395 - Hardcoded Passwords in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41482 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55393 - Local File Inclusion in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41454 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Microsoft says threat actors are ahead in the early AI race https://b3ncloud.net/article/41483 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104057 - Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler https://b3ncloud.net/article/41455 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55230 - Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character https://b3ncloud.net/article/41456 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104059 - Lektor 3.3.14 CSRF via Admin API Endpoints https://b3ncloud.net/article/41457 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-97662 - Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace https://b3ncloud.net/article/41458 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104018 - VxWorks 7 improper privilege management https://b3ncloud.net/article/41461 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102294 - Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration https://b3ncloud.net/article/41460 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102369 - Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200 https://b3ncloud.net/article/41459 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103922 - Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path https://b3ncloud.net/article/41462 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2023-54404 - Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation https://b3ncloud.net/article/41452 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Operation KillSwitch: Police Dismantle KillSec Ransomware Group https://b3ncloud.net/article/41463 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55083 - DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE) https://b3ncloud.net/article/41453 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks https://b3ncloud.net/article/41464 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-73975 - djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples https://b3ncloud.net/article/41465 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-13043 - WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access https://b3ncloud.net/article/41466 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-101888 - Prime Mover < 2.2.1 Zip Slip Path Traversal File Write https://b3ncloud.net/article/41439 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers https://b3ncloud.net/article/41484 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8863-1: GStreamer Good Plugins vulnerabilities https://b3ncloud.net/article/41440 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories https://b3ncloud.net/article/41442 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-96659 - Foreman: excessive permissions for viewer role on preview https://b3ncloud.net/article/41441 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-96658 - Foreman: safemode bypass leading to rce https://b3ncloud.net/article/41443 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12541 - Foreman: command injection in foreman-rake database tasks https://b3ncloud.net/article/41444 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12540 - Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter https://b3ncloud.net/article/41445 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12405 - Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter https://b3ncloud.net/article/41446 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download) https://b3ncloud.net/article/41447 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12627 - Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability https://b3ncloud.net/article/41448 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-101322 - Eclipse BaSyx AAS Web UI Authorization Header Credential Leak https://b3ncloud.net/article/41449 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-14316 - Heap buffer overflow in boks_sshd revoked-key error handling https://b3ncloud.net/article/41437 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365 https://b3ncloud.net/article/41438 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Ransomwaregruppe Killsec ausgehoben: Teenager als Hauptverdächtiger https://b3ncloud.net/article/41425 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled https://b3ncloud.net/article/41450 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2024-58388 - Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html https://b3ncloud.net/article/41426 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor https://b3ncloud.net/article/41427 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-79898 - Fortra BoKS Manager crlserver command injection vulnerability https://b3ncloud.net/article/41428 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts https://b3ncloud.net/article/41429 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory https://b3ncloud.net/article/41430 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103068 - WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerability https://b3ncloud.net/article/41431 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-97284 - WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability https://b3ncloud.net/article/41432 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-95588 - WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability https://b3ncloud.net/article/41433 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-62071 - WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability https://b3ncloud.net/article/41434 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103752 - WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability https://b3ncloud.net/article/41414 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass https://b3ncloud.net/article/41415 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Police dismantle KillSec ransomware gang allegedly led by 16-year-old https://b3ncloud.net/article/41395 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 KI-gestütztes Reverse Engineering: Thales erweitert Sentinel Envelope um zusätzlichen Softwareschutz https://b3ncloud.net/article/41435 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-79901 - Predictable Active Directory service-account passwords in BoKS Manager https://b3ncloud.net/article/41436 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-66246 - HCL iControl is affected by multiple security vulnerabilities https://b3ncloud.net/article/41416 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader https://b3ncloud.net/article/41417 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators https://b3ncloud.net/article/41418 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 The Day-One Hole in Zero Trust Architecture https://b3ncloud.net/article/41419 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Kiteworks patches max severity code injection vulnerability https://b3ncloud.net/article/41451 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Teen hacker arrested amid KillSec cyber gang takedown https://b3ncloud.net/article/41420 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor https://b3ncloud.net/article/41421 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-74865: Kritische SOGo-Schwachstelle erlaubt Kontoübernahme ohne gültiges Passwort https://b3ncloud.net/article/41396 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-76504 https://b3ncloud.net/article/41397 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers Abuse Microsoft Defender Exclusions to Hide Malware From Antivirus Scans https://b3ncloud.net/article/41398 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 AI Has Changed Attack Speed, Not Security Fundamentals https://b3ncloud.net/article/41399 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Node.js ImageResponse Implementation Vulnerability Enables Remote Code Execution https://b3ncloud.net/article/41400 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure https://b3ncloud.net/article/41422 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8862-1: libXpm vulnerability https://b3ncloud.net/article/41401 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Axios HTTP/2 Flaws Enable SSRF Control Bypass and Node.js Denial of Service https://b3ncloud.net/article/41402 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102379 - WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability https://b3ncloud.net/article/41403 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103338 - WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability https://b3ncloud.net/article/41404 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103067 - WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/41405 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-94250 - Apache APISIX: Batch response aggregation can exhaust worker memory https://b3ncloud.net/article/41367 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zscaler Ransomware Report 2026: 896 Terabyte Datendiebstahl, KI-Angriffe und Führungskräfte im Fokus https://b3ncloud.net/article/41423 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8861-1: OpenSSL vulnerabilities https://b3ncloud.net/article/41376 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access https://b3ncloud.net/article/41625 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Convincing Free Mobile phishing emails appear after data breach https://b3ncloud.net/article/41377 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8860-1: OpenStack Designate vulnerability https://b3ncloud.net/article/41406 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103757 - Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation https://b3ncloud.net/article/41407 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103286 - Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications https://b3ncloud.net/article/41408 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103278 - Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe https://b3ncloud.net/article/41410 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103271 - Ghost 4.0.0 before 6.63.0 Restricted Content Bypass https://b3ncloud.net/article/41409 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103272 - Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API https://b3ncloud.net/article/41412 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103262 - Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient https://b3ncloud.net/article/41411 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103263 - Tornado before 6.5.9 StaticFileHandler Path Traversal via Symlink https://b3ncloud.net/article/41413 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103259 - n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials https://b3ncloud.net/article/41378 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Reverse-Proxy fürs Homelab: Pangolin 1.24 bringt Selbstbau-VPN https://b3ncloud.net/article/41368 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Malwarebytes earns another Top Product award in independent testing https://b3ncloud.net/article/41369 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Treasury Blacklists Most-Wanted ATM Malware Developer and His Network https://b3ncloud.net/article/41370 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Nvidia GPU Display Treiber: Mehrere Schwachstellen https://b3ncloud.net/article/41379 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-88789 - Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening https://b3ncloud.net/article/41371 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Pentagon breach exposes Social Security numbers and military records of millions https://b3ncloud.net/article/41424 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8857-1: KCoreAddons vulnerability https://b3ncloud.net/article/41372 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zammad Zero-Days Exploited in AI-Powered DIVD Hack https://b3ncloud.net/article/41373 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates https://b3ncloud.net/article/41380 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103758 - Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route https://b3ncloud.net/article/41381 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103292 - Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head https://b3ncloud.net/article/41382 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103283 - Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling https://b3ncloud.net/article/41383 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103277 - Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed https://b3ncloud.net/article/41384 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103268 - Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset https://b3ncloud.net/article/41385 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103264 - Fleet before 4.87.0 Authentication Bypass via Device Identifiers https://b3ncloud.net/article/41386 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103255 - n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase https://b3ncloud.net/article/41387 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103253 - n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table https://b3ncloud.net/article/41388 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103250 - n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory https://b3ncloud.net/article/41389 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103248 - n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase https://b3ncloud.net/article/41390 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103247 - n8n before 1.123.80 Credential Tampering via Duplicate Node IDs https://b3ncloud.net/article/41391 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103244 - ground-station before 0.8.0 Authentication Bypass via setup.restore https://b3ncloud.net/article/41393 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-64949 - Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager https://b3ncloud.net/article/41392 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-64950 - Stored Cross-Site Scripting via Directory Name in File Manager Create Directory https://b3ncloud.net/article/41394 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103493 - JetBrains YouTrack Stored Cross-Site Scripting https://b3ncloud.net/article/41374 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 New PS5 Relapse Exploit Breaks Into the Kernel Across Years of Firmware Releases https://b3ncloud.net/article/41353 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 ModSecurity Vulnerabilities Let Attackers Bypass Web Application Firewall Protections https://b3ncloud.net/article/41354 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers stole Pentagon personnel records of over 3 million people https://b3ncloud.net/article/41355 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 500,000 Active Credentials Left Exposed on GitHub https://b3ncloud.net/article/41375 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 The Secrets of the US Spyware King https://b3ncloud.net/article/41356 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root https://b3ncloud.net/article/41357 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Die Anatomie einer Pre-Auth-RCE https://b3ncloud.net/article/41347 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed https://b3ncloud.net/article/41358 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Treiber-Lücken gefährden Linux- und Windows-PCs mit Nvidia-GPU https://b3ncloud.net/article/41359 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/41360 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-95687 - WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint https://b3ncloud.net/article/41361 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-15983 - Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter https://b3ncloud.net/article/41348 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability https://b3ncloud.net/article/41349 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session https://b3ncloud.net/article/41362 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-75957 - Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter https://b3ncloud.net/article/41364 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-15989 - Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter https://b3ncloud.net/article/41363 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-19807 - ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP Tool https://b3ncloud.net/article/41350 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 New 2CLoader Malware Evades Security Tools to Deploy Vidar and Remus Stealers https://b3ncloud.net/article/41365 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103655 - MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period https://b3ncloud.net/article/41351 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Attacken auf IT-Verwaltungsplattform HPE OneView möglich https://b3ncloud.net/article/41366 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds https://b3ncloud.net/article/41352 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders https://b3ncloud.net/article/41329 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 TU Graz entdeckt Sicherheitsrisiken in File Notifications von Windows, Linux, Android und macOS https://b3ncloud.net/article/41341 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-77185: Kritischer Authentifizierungs-Bypass in Apache MINA SSHD https://b3ncloud.net/article/41342 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild https://b3ncloud.net/article/41343 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 WatchGuard schließt teils kritische Lücken in Fireware OS https://b3ncloud.net/article/41344 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2025-41753 - Path traversal in dynamically created BACnet File Objects https://b3ncloud.net/article/41330 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-80275 - Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint https://b3ncloud.net/article/41345 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path https://b3ncloud.net/article/41331 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft https://b3ncloud.net/article/41333 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82829 - Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process https://b3ncloud.net/article/41332 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-92966 - Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field https://b3ncloud.net/article/41338 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82824 - Path traversal may allow arbitrary files to be viewed, created, modified, or deleted https://b3ncloud.net/article/41337 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82825 - Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed https://b3ncloud.net/article/41336 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82826 - Authentication information or sensitive data may be intercepted in transit https://b3ncloud.net/article/41335 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82827 - A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens https://b3ncloud.net/article/41334 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82828 - Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges https://b3ncloud.net/article/41340 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-76142 - Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface https://b3ncloud.net/article/41339 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-76146 - Genians, Inc Genian SSL PNS OS Command Injection https://b3ncloud.net/article/41324 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Angriffe aus dem lokalen Netzwerk auf Zyxel-Switches https://b3ncloud.net/article/41325 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access https://b3ncloud.net/article/41326 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs https://b3ncloud.net/article/41323 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-13313 - ASUS Router Active Debug Code Command Injection Vulnerability https://b3ncloud.net/article/41322 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-14157 - ASUS Router Format String Vulnerability https://b3ncloud.net/article/41321 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2025-14564 https://b3ncloud.net/article/41328 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Cybersicherheit: Die größten Herausforderungen für die IT https://b3ncloud.net/article/41327 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Windows-Update-Fehler analysieren und beheben https://b3ncloud.net/article/41595 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6534-1 webkit2gtk - security update https://b3ncloud.net/article/41594 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6535-1 chromium - security update https://b3ncloud.net/article/41593 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6536-1 thunderbird - security update https://b3ncloud.net/article/41592 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6537-1 libpng1.6 - security update https://b3ncloud.net/article/41319 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103591 - DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file https://b3ncloud.net/article/41298 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101283 - iperf3 Heap Buffer Overflow https://b3ncloud.net/article/41299 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-51570 - ModelScope AgentScope Path Traversal Vulnerability https://b3ncloud.net/article/41303 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102997 - pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) https://b3ncloud.net/article/41302 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102998 - pypdf: Possible long runtimes when generating appearance streams https://b3ncloud.net/article/41301 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102999 - pypdf: Possible long runtimes with large amount of embedded files https://b3ncloud.net/article/41300 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103000 - pypdf: Possible large memory usage when retrieving alphabetical page labels https://b3ncloud.net/article/41305 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102995 - pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) https://b3ncloud.net/article/41304 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102996 - pypdf: Possible large memory usage when parsing font data https://b3ncloud.net/article/41307 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102147 - Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) https://b3ncloud.net/article/41306 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102149 - Kiteworks Email Protection Gateway Improper Access Control https://b3ncloud.net/article/41285 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-86950 https://b3ncloud.net/article/41284 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96760 https://b3ncloud.net/article/41283 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-28802 https://b3ncloud.net/article/41311 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102120 - Kiteworks Core OS Command Injection https://b3ncloud.net/article/41310 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102121 - Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor https://b3ncloud.net/article/41309 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102125 - Kiteworks Core Sandbox Escape https://b3ncloud.net/article/41308 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102126 - Kiteworks Core Stored Cross-site Scripting (XSS) https://b3ncloud.net/article/41312 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102115 - Kiteworks Core Authentication Bypass in the Password Reset Workflow https://b3ncloud.net/article/41314 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102105 - Kiteworks Email Protection Gateway server-side request forgery https://b3ncloud.net/article/41313 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102106 - Kiteworks Email Protection Gateway improper authentication https://b3ncloud.net/article/41316 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102100 - Kiteworks Core stored XSS https://b3ncloud.net/article/41315 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102101 - Kiteworks Core deserialization of untrusted data https://b3ncloud.net/article/41317 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102092 - Kiteworks Core stored XSS https://b3ncloud.net/article/41286 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Russian state hackers use new RedFlick technique to push malware https://b3ncloud.net/article/41287 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2023-54402 - iDocView SSRF via /doc/upload Endpoint Hardcoded Token https://b3ncloud.net/article/41288 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Stadt Wien entdeckt Einbruch in Online-Speicher https://b3ncloud.net/article/41289 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103547 - OpenBSD ldapd Authentication Correlation Vulnerability https://b3ncloud.net/article/41290 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102994 - pypdf: Possible long runtimes/large memory usage when parsing indirect objects https://b3ncloud.net/article/41292 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102992 - piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env https://b3ncloud.net/article/41291 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102993 - pypdf: Possible large memory usage when retrieving Roman page labels https://b3ncloud.net/article/41293 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102990 - basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking) https://b3ncloud.net/article/41294 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101885 - ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path https://b3ncloud.net/article/41295 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101882 - OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set https://b3ncloud.net/article/41296 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101880 - OpenClaw Windows Node before 2026.7.1 Authorization Bypass https://b3ncloud.net/article/41278 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-27962 https://b3ncloud.net/article/41279 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 DIVD says Zammad zero-days enabled AI-driven network breach https://b3ncloud.net/article/41280 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 WatchGuard fixes critical Fireware OS flaw allowing remote code execution https://b3ncloud.net/article/41255 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101043 https://b3ncloud.net/article/41256 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-97291 - WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability https://b3ncloud.net/article/41257 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-87004 - Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification https://b3ncloud.net/article/41260 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55094 - Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`) https://b3ncloud.net/article/41259 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55107 - Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service) https://b3ncloud.net/article/41258 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55224 - MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall https://b3ncloud.net/article/41265 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103471 - restbed through 5.0.0 Denial of Service via Unbounded Header Buffering https://b3ncloud.net/article/41264 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103472 - restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering https://b3ncloud.net/article/41263 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103473 - Deno 2.7.0 through 2.9.7 Command Injection via node:child_process https://b3ncloud.net/article/41262 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103474 - yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE https://b3ncloud.net/article/41261 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103475 - yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure https://b3ncloud.net/article/41266 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102377 - WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability https://b3ncloud.net/article/41267 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100512 - WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability https://b3ncloud.net/article/41249 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Over 543,000 valid credentials exposed in public GitHub repositories https://b3ncloud.net/article/41269 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-62308 - Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint https://b3ncloud.net/article/41268 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-75969 - PTZOptics Missing Authentication in Firmware Upload https://b3ncloud.net/article/41270 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55494 - Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset https://b3ncloud.net/article/41273 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-46711 - Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network https://b3ncloud.net/article/41272 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55176 - Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token https://b3ncloud.net/article/41271 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55181 - Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false https://b3ncloud.net/article/41274 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-19445 - Use-after-free of a server-side SSLContext when sni_callback switches contexts https://b3ncloud.net/article/41276 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102489 - Undisclosed RCE in Zammad v6.3 and higher https://b3ncloud.net/article/41275 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102490 - Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha https://b3ncloud.net/article/41250 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS https://b3ncloud.net/article/41251 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux https://b3ncloud.net/article/41229 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells https://b3ncloud.net/article/41252 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets https://b3ncloud.net/article/41253 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8858-1: Authen::SASL vulnerability https://b3ncloud.net/article/41297 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8859-1: ImageMagick vulnerabilities https://b3ncloud.net/article/41254 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks https://b3ncloud.net/article/41230 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Russian Hackers Target 100+ Organizations With New RedFlick Phishing Attack https://b3ncloud.net/article/41231 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103470 - Internet2 Grouper Privilege Escalation https://b3ncloud.net/article/41232 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103432 - APCUPSD Stack-Based Buffer Overflow https://b3ncloud.net/article/41234 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102427 - Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 https://b3ncloud.net/article/41233 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-61500 https://b3ncloud.net/article/41235 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100277 - JetBrains YouTrack Notification Signature Replay Account Takeover https://b3ncloud.net/article/41236 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100273 - JetBrains YouTrack Authorization Bypass and Arbitrary Code Execution https://b3ncloud.net/article/41237 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100255 - JetBrains TeamCity Administrator Account Takeover via Password Reset Vulnerability https://b3ncloud.net/article/41239 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100253 - JetBrains TeamCity Sandbox Escape Leading to Remote Code Execution https://b3ncloud.net/article/41238 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100254 - JetBrains TeamCity CRLF Injection Remote Code Execution https://b3ncloud.net/article/41240 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Phishing Response: 3 Steps SOC Teams Can Take to Investigate Threats Faster https://b3ncloud.net/article/41346 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8855-1: GStreamer Bad Plugins vulnerability https://b3ncloud.net/article/41241 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8856-1: Kdenlive, MLT vulnerability https://b3ncloud.net/article/41318 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8845-1: GVfs vulnerabilities https://b3ncloud.net/article/41194 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS https://b3ncloud.net/article/41195 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Hackers steal protective order and foster care records from Arizona courts