https://b3ncloud.net/ daily 1.0 2026-10-30 https://b3ncloud.net/news hourly 0.9 2026-10-30 https://b3ncloud.net/tools monthly 0.8 2026-10-30 https://b3ncloud.net/tools/ip-lookup monthly 0.7 2026-10-30 https://b3ncloud.net/tools/dns-lookup monthly 0.7 2026-10-30 https://b3ncloud.net/tools/ip-info monthly 0.7 2026-10-30 https://b3ncloud.net/tools/url-parser monthly 0.6 2026-10-30 https://b3ncloud.net/tools/http-status-codes monthly 0.6 2026-10-30 https://b3ncloud.net/tools/common-ports monthly 0.6 2026-10-30 https://b3ncloud.net/tools/ip-range-calculator monthly 0.6 2026-10-30 https://b3ncloud.net/tools/dns-leak-test monthly 0.7 2026-10-30 https://b3ncloud.net/search daily 0.7 2026-10-30 https://b3ncloud.net/breach-check monthly 0.7 2026-10-30 https://b3ncloud.net/leak-monitor monthly 0.7 2026-10-30 https://b3ncloud.net/phishing-check monthly 0.7 2026-10-30 https://b3ncloud.net/ioc monthly 0.7 2026-10-30 https://b3ncloud.net/ssl monthly 0.7 2026-10-30 https://b3ncloud.net/header monthly 0.7 2026-10-30 https://b3ncloud.net/cve-search weekly 0.8 2026-10-30 https://b3ncloud.net/vulnerability-check weekly 0.7 2026-10-30 https://b3ncloud.net/mitre weekly 0.7 2026-10-30 https://b3ncloud.net/intel daily 0.8 2026-10-30 https://b3ncloud.net/cheatsheets monthly 0.7 2026-10-30 https://b3ncloud.net/dkb weekly 0.7 2026-10-30 https://b3ncloud.net/security-checklist monthly 0.6 2026-10-30 https://b3ncloud.net/incident-response monthly 0.6 2026-10-30 https://b3ncloud.net/firewall-rules monthly 0.6 2026-10-30 https://b3ncloud.net/regex monthly 0.6 2026-10-30 https://b3ncloud.net/cron monthly 0.6 2026-10-30 https://b3ncloud.net/log-analyzer monthly 0.6 2026-10-30 https://b3ncloud.net/subnet monthly 0.6 2026-10-30 https://b3ncloud.net/troubleshooting monthly 0.6 2026-10-30 https://b3ncloud.net/darknet weekly 0.7 2026-10-30 https://b3ncloud.net/stats daily 0.7 2026-10-30 https://b3ncloud.net/updates weekly 0.5 2026-10-30 https://b3ncloud.net/updates/feed.xml hourly 0.6 2026-10-30 https://b3ncloud.net/feed.xml hourly 0.6 2026-10-30 https://b3ncloud.net/cves/feed.xml hourly 0.6 2026-10-30 https://b3ncloud.net/impressum yearly 0.2 2026-10-30 https://b3ncloud.net/datenschutz yearly 0.2 2026-10-30 https://b3ncloud.net/article/45799 2026-10-31 weekly 0.7 B3ncloud.net de 2026-10-31 DSA-6597-1 dpdk - security update https://b3ncloud.net/article/45800 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices https://b3ncloud.net/article/45801 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-115829 - Secret Server partial login bypass https://b3ncloud.net/article/45802 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-115830 - Secret Server JWT issuance error https://b3ncloud.net/article/45803 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-55598 - PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation) https://b3ncloud.net/article/45804 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-90888 - WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability https://b3ncloud.net/article/45805 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-78527 - WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability https://b3ncloud.net/article/45806 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-73186 - WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability https://b3ncloud.net/article/45807 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-62331 - praktor: Telegram upload traversal permits persistent agent instruction injection https://b3ncloud.net/article/45809 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-62160 - Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware https://b3ncloud.net/article/45808 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-62162 - Hydra: Deposit Claim omits Head state-token spending requirement https://b3ncloud.net/article/45811 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61845 - Crass: Large numeric exponents cause CPU and memory denial of service https://b3ncloud.net/article/45810 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61854 - VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth https://b3ncloud.net/article/45812 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61586 - Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider) https://b3ncloud.net/article/45814 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-39732 - WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability https://b3ncloud.net/article/45813 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-39738 - WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/45816 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java https://b3ncloud.net/article/45815 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119526 - WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability https://b3ncloud.net/article/45818 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-118086 - WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability https://b3ncloud.net/article/45817 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-118090 - WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability https://b3ncloud.net/article/45819 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-116852 - WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability https://b3ncloud.net/article/45820 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-116386 - WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability https://b3ncloud.net/article/45797 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-98432 https://b3ncloud.net/article/45821 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-78403 - Unauthenticated Stack Buffer Overflow in Sentinel Keys Server https://b3ncloud.net/article/45798 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 $6.3 Billion Stolen from Binance in Attack Attributed to North Korea https://b3ncloud.net/article/45823 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119760 - sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel() https://b3ncloud.net/article/45822 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119762 - Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests https://b3ncloud.net/article/45776 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119979 - LM Studio before 0.4.22+1 Path Traversal via Model Downloader https://b3ncloud.net/article/45777 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel https://b3ncloud.net/article/45778 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-118697 - JetBrains Toolbox and IntelliJ IDEA Improper Certificate Validation Vulnerability https://b3ncloud.net/article/45779 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-118696 - JetBrains IDEs Embedded Browser Certificate Validation Vulnerability https://b3ncloud.net/article/45780 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119978 - Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore https://b3ncloud.net/article/45783 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61804 - myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management https://b3ncloud.net/article/45782 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61826 - Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery https://b3ncloud.net/article/45781 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-65566 - WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/45785 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119116 - Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c https://b3ncloud.net/article/45784 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119148 - Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint https://b3ncloud.net/article/45786 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-115642 - OpenStack Keystonemiddleware Privilege Escalation Vulnerability https://b3ncloud.net/article/45787 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-112816 - Improper certificate validation in the HTTPS listener in LXD https://b3ncloud.net/article/45788 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-105894 - Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update https://b3ncloud.net/article/45789 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-115346 - Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field https://b3ncloud.net/article/45790 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2025-8574 - Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion https://b3ncloud.net/article/45791 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide https://b3ncloud.net/article/45793 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119719 - Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction https://b3ncloud.net/article/45792 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119722 - Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct() https://b3ncloud.net/article/45794 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119287 - Zuke: Command-form registry descriptors bypass the MCP launch policy https://b3ncloud.net/article/45796 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-104066 - Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking https://b3ncloud.net/article/45795 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-104067 - Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin https://b3ncloud.net/article/45774 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them https://b3ncloud.net/article/45750 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-93327 - Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution https://b3ncloud.net/article/45754 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61729 - SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection https://b3ncloud.net/article/45753 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61730 - SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount https://b3ncloud.net/article/45752 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61737 - ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin https://b3ncloud.net/article/45751 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61738 - SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) https://b3ncloud.net/article/45756 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61708 - SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) https://b3ncloud.net/article/45755 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-61728 - SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover https://b3ncloud.net/article/45758 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119680 - Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature https://b3ncloud.net/article/45757 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-45144 - Chamilo LMS: Stored XSS in public user-profile fields https://b3ncloud.net/article/45760 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119660 - MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key https://b3ncloud.net/article/45759 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119662 - Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend https://b3ncloud.net/article/45762 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119654 - DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization https://b3ncloud.net/article/45761 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119656 - CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList https://b3ncloud.net/article/45763 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-112905 - Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft https://b3ncloud.net/article/45764 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-110799 - Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover https://b3ncloud.net/article/45765 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2010-20125 - DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php https://b3ncloud.net/article/45766 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119717 - pybars4 through 0.9.13 Code Injection via Bracketed Path Segments https://b3ncloud.net/article/45767 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119713 - Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands https://b3ncloud.net/article/45768 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119706 - LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization https://b3ncloud.net/article/45769 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages https://b3ncloud.net/article/45770 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress https://b3ncloud.net/article/45740 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments https://b3ncloud.net/article/45717 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Binance-Hack: 6,3 Mrd. Dollar in wenigen Minuten gestohlen – Spur führt nach Nordkorea https://b3ncloud.net/article/45741 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak https://b3ncloud.net/article/45742 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Malicious Claude Code extension on Cursor planted SSH backdoors https://b3ncloud.net/article/45743 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data https://b3ncloud.net/article/45744 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 IBM Langflow: Kritische RCE-Lücken in Versionen 1.0.0 bis 1.12.3 https://b3ncloud.net/article/45745 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 „SMS des Todes“: Sicherheitslücke lässt Android-Smartphones abstürzen https://b3ncloud.net/article/45771 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119578 - MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json() https://b3ncloud.net/article/45772 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119574 - Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service https://b3ncloud.net/article/45746 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals https://b3ncloud.net/article/45747 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Adobe Digital Editions: Schwachstelle ermöglicht Manipulation von Dateien https://b3ncloud.net/article/45775 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours https://b3ncloud.net/article/45718 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone https://b3ncloud.net/article/45773 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackerangriff auf Binance: Folgen und Einordnung https://b3ncloud.net/article/45748 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Passkeys Are Better Than Passwords. But They Are Not Enough. https://b3ncloud.net/article/45719 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01 https://b3ncloud.net/article/45720 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-91913 - Dell OpenManage Enterprise OS Command Injection Vulnerability https://b3ncloud.net/article/45721 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Bulletproof Host Virtualine Loses Its Domain to FBI Seizure https://b3ncloud.net/article/45722 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers Exploit Passwordless Telnet to Infect Linux Devices With New Kairos DDoS Botnet https://b3ncloud.net/article/45723 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-91917 - Dell OpenManage Enterprise Improper Input Validation Vulnerability https://b3ncloud.net/article/45724 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-75882 - Improper access control vulnerability in ESET Encryption products for Windows https://b3ncloud.net/article/45725 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119597 - OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery https://b3ncloud.net/article/45726 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119572 - Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider https://b3ncloud.net/article/45727 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-76418 https://b3ncloud.net/article/45728 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert https://b3ncloud.net/article/45729 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CISA says max severity GitLab flaw now exploited in the wild https://b3ncloud.net/article/45730 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones https://b3ncloud.net/article/45695 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Binance hit by largest-ever crypto theft, with $6.3 billion stolen https://b3ncloud.net/article/45696 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control https://b3ncloud.net/article/45697 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 TeamViewer stopft Codeschmuggel-Lücke https://b3ncloud.net/article/45732 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119568 - vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking https://b3ncloud.net/article/45731 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119586 - SQLite CLI through 3.54.1 Command Injection via .recover Output https://b3ncloud.net/article/45733 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119559 - OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch https://b3ncloud.net/article/45734 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119557 - n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node https://b3ncloud.net/article/45735 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119422 - Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector https://b3ncloud.net/article/45736 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119421 - Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmation https://b3ncloud.net/article/45737 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119409 - OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting https://b3ncloud.net/article/45739 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119374 - SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete() https://b3ncloud.net/article/45738 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119379 - SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind() https://b3ncloud.net/article/45698 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Erneut kritischer Bug in Linux TCP/IP aufgedeckt – Updates in Arbeit https://b3ncloud.net/article/45699 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 How to prioritize remediation after a pentest: a practitioner workflow https://b3ncloud.net/article/45700 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Fresh WordPress Vulnerability in Attackers’ Crosshairs https://b3ncloud.net/article/45701 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-110972 - Use of Client-Side Authentication in Płatnik https://b3ncloud.net/article/45702 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-111505 - Dell OpenManage Enterprise OS Command Injection Vulnerability https://b3ncloud.net/article/45703 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2025-68394 - SQL Injection in Protectel https://b3ncloud.net/article/45704 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes https://b3ncloud.net/article/45705 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers steal and publish data on 41,000 Homeland Security workers https://b3ncloud.net/article/45706 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119420 - Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation https://b3ncloud.net/article/45708 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119418 - CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame() https://b3ncloud.net/article/45707 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119419 - CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation https://b3ncloud.net/article/45709 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-119408 - n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes https://b3ncloud.net/article/45690 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Microsoft finally fixes VPN issues caused by September updates https://b3ncloud.net/article/45691 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers https://b3ncloud.net/article/45711 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-22110 - Missing authentication check on POST/PUT requests https://b3ncloud.net/article/45710 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-85268 - Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID https://b3ncloud.net/article/45714 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-116366 - Unauthenticated RCE vulnerability against ClickHouse Server https://b3ncloud.net/article/45713 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-22105 - Use of default password based on serial number https://b3ncloud.net/article/45712 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-22109 - Default WebUI passwords stored in plaintext https://b3ncloud.net/article/45715 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2025-31704 - Dahua Intelligent Connection Center command injection https://b3ncloud.net/article/45692 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Drupal Commerce Core Vulnerability Exploited Against Online Stores https://b3ncloud.net/article/45693 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces https://b3ncloud.net/article/45716 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison https://b3ncloud.net/article/45694 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Nach Cyberangriff: Uni Leipzig weiterhin offline https://b3ncloud.net/article/45749 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 North Korean ‘elite’ hacking group steals $6.36bn from Binance https://b3ncloud.net/article/45678 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Drupal warns of critical Commerce Core flaw exploited in attacks https://b3ncloud.net/article/45679 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Die Meldepflicht läuft, das Gesetz ist beschlossen https://b3ncloud.net/article/45680 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-14467 - Display of information in the Forocoches comments editor https://b3ncloud.net/article/45681 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack https://b3ncloud.net/article/45682 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Max-Severity GitLab Vulnerability Exploited Against Alpine Linux https://b3ncloud.net/article/45683 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Milliardenschwerer Cyberangriff trifft Binance https://b3ncloud.net/article/45684 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 WordPress: Exploit-Versuche beobachtet, Update stopft Schadcode-Lücke https://b3ncloud.net/article/45685 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Binance links $6.3 billion crypto theft to compromised DevOps laptop https://b3ncloud.net/article/45686 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-59387 - Broken access control restriction in Cloud Controller API https://b3ncloud.net/article/45687 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Binance Faces Largest Crypto Heist – $6.36 Billion Reportedly Stolen by North Korean Group https://b3ncloud.net/article/45659 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Spear-Phishing steigt um 41 Prozent – Angreifer setzen auf gezielte Identitätsangriffe https://b3ncloud.net/article/45688 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor https://b3ncloud.net/article/45667 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines https://b3ncloud.net/article/45668 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Phishing im Namen von Anthropic umgeht teils führende E-Mail-Schutzsysteme https://b3ncloud.net/article/45669 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Yamaha NWR100: Kritische OS-Command-Injection in WLAN-Router CVE-2026-97854 https://b3ncloud.net/article/45670 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks https://b3ncloud.net/article/45671 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access https://b3ncloud.net/article/45672 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates https://b3ncloud.net/article/45689 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-82104 - API permission bypass via logic bug https://b3ncloud.net/article/45673 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Researcher Uses Claude AI to Extract Internal Anthropic Binary and Recover Google Cloud Token https://b3ncloud.net/article/45674 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor https://b3ncloud.net/article/45675 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Tenable setzt bei Exposure Management auf Agentic AI https://b3ncloud.net/article/45660 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Cisco-Firewalls und GitLab-Lücke werden angegriffen https://b3ncloud.net/article/45676 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw https://b3ncloud.net/article/45661 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Ruby behebt drei kritische Lücken, vor denen CVE-Scanner nicht warnen https://b3ncloud.net/article/45677 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Top 10 Best UEBA Tools in 2026 [Ranked & Scored] https://b3ncloud.net/article/45662 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Top 10 Best Cyber Threat Intelligence (CTI) Feeds & Services in 2026 [Ranked & Scored] https://b3ncloud.net/article/45663 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems https://b3ncloud.net/article/45664 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-89435 - Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter https://b3ncloud.net/article/45665 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-103039 - Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field https://b3ncloud.net/article/45666 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 In vier Schritte zu einer effektiven Identitätssicherheitsstrategie https://b3ncloud.net/article/45655 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hacker leaks data on more than 40,000 Homeland Security employees https://b3ncloud.net/article/45656 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Hackers Actively Exploiting WordPress Remote Code Execution Flaw Just Hours After Patch Release https://b3ncloud.net/article/45657 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Böswillige Admins führen im Okta Access Gateway Systembefehle aus https://b3ncloud.net/article/45658 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-104368 - Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Field https://b3ncloud.net/article/45652 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Accenture Contractor Allegedly Gave Claude AI Agent Access to Secure Pentagon Network https://b3ncloud.net/article/45653 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CISA Warns of Linux Kernel Missing Initialization Vulnerability Exploited in Attacks https://b3ncloud.net/article/45654 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Polymarket Hacked – Users Reported Funds Stolen From Their Wallets https://b3ncloud.net/article/45651 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 World’s Largest Crypto Exchange Binance Hacked, Over $5.7 Billion Reportedly Stolen https://b3ncloud.net/article/45650 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 CVE-2026-113910 https://b3ncloud.net/article/45619 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 LLMNR, mDNS und NetBIOS als Risiko im Windows-Netz https://b3ncloud.net/article/45618 2026-10-30 weekly 0.7 B3ncloud.net de 2026-10-30 Angriffsfläche minimieren, bevor das nächste KI-Modell kommt https://b3ncloud.net/article/45642 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-19175: Use-after-free in Microsoft Payments veröffentlicht https://b3ncloud.net/article/45643 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Apple schließt 286 Schwachstellen in iOS und macOS – Fix für ausgenutzte Lücke auch für iOS 18 https://b3ncloud.net/article/45647 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-92744 - Delinea Privilege Manager agent unauthenticated remote code execution vulnerability https://b3ncloud.net/article/45648 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-107239 - Veeam Management Pack for Microsoft System Center Remote Code Execution Vulnerability https://b3ncloud.net/article/45644 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Juniper Session Smart Router: Kritische Lücke vor Inbetriebnahme erlaubt Admin-Rechte ohne Anmeldung https://b3ncloud.net/article/45645 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Grafana: Mehrere kritische Schwachstellen erlauben Umgehung von Schutzmechanismen und DoS https://b3ncloud.net/article/45649 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-45049 - OpenAM Session Hijacking via CDSSO https://b3ncloud.net/article/45631 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-48356 https://b3ncloud.net/article/45630 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-112479 https://b3ncloud.net/article/45629 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-112688 https://b3ncloud.net/article/45632 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hugging Face malware campaign returns to hijack GPUs for crypto mining https://b3ncloud.net/article/45633 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Japan Airlines suffers third-party data breach exposing passenger info https://b3ncloud.net/article/45634 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Polymarket halts trading after crypto-draining script breach, $2.5M traced https://b3ncloud.net/article/45635 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-61719 - WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field https://b3ncloud.net/article/45636 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-61707 - SOCFortress CoPilot: Stored case-report template injection permits backend code execution https://b3ncloud.net/article/45637 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-61671 - WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes https://b3ncloud.net/article/45638 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-61645 - Docat has Arbitrary File Upload exists in Upload API https://b3ncloud.net/article/45639 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-61576 - Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key https://b3ncloud.net/article/45640 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-13303 - Boundary vulnerable to server-side request forgery in Vault credential store https://b3ncloud.net/article/45620 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-9535 - VTK ChacoReader Out-of-Bounds Read https://b3ncloud.net/article/45621 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119168 - Nomad allocation data migration may allow host directory permission modification via symlink following https://b3ncloud.net/article/45622 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-103093 - Sandbox Escape via Table Rotation in ServiceNow AI Platform https://b3ncloud.net/article/45623 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories https://b3ncloud.net/article/45615 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 484,142 Exposed Cloud Buckets Contain 18 Billion Files https://b3ncloud.net/article/45616 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware https://b3ncloud.net/article/45624 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118769 - Botan: Integer overflow when reporting block size in FFI can cause memory corruption https://b3ncloud.net/article/45600 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-41709 https://b3ncloud.net/article/45601 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-107347 - Nomad dispatch payload writes can escape the allocation directory through symlinks https://b3ncloud.net/article/45602 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 State of Ad Fraud 2026: 52% of Schemes Use AI as Cloaking Loses Ground to iOS Exploits and Messenger Phishing https://b3ncloud.net/article/45605 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118762 - Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN https://b3ncloud.net/article/45604 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118764 - minimatch: potential denial of service via globparts amplification https://b3ncloud.net/article/45603 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes https://b3ncloud.net/article/45641 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-107058 - Shelter Binder Service and Preference State Authorization Bypass https://b3ncloud.net/article/45606 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2023-7357 - FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability https://b3ncloud.net/article/45568 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2025-65200 https://b3ncloud.net/article/45563 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 DDoS-Angriffe explodieren: 18,2 Millionen Attacken in nur drei Monaten https://b3ncloud.net/article/45628 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 USN-8958-1: .NET vulnerabilities https://b3ncloud.net/article/45569 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals https://b3ncloud.net/article/45607 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-96203 - Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability https://b3ncloud.net/article/45608 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-96196 - Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability https://b3ncloud.net/article/45609 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-93680 - Langflow OSS is affected by multiple vulnerabilities https://b3ncloud.net/article/45610 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-93570 - XML External Entity injection in Szafir and Szafir Weryfikująca https://b3ncloud.net/article/45611 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-88077 - Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability https://b3ncloud.net/article/45612 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-85899 - Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability https://b3ncloud.net/article/45614 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-62018 - WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability https://b3ncloud.net/article/45613 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-62131 - WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability https://b3ncloud.net/article/45570 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-111577: WordPress-Plugin GoSMTP – Erweiterung mit über 500.000 Installationen potenziell betroffen https://b3ncloud.net/article/45571 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Chrome extensions with 13.4 million installs caught hijacking searches https://b3ncloud.net/article/45572 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 U.S. CISA adds Linux Kernel and Broadcom VMWare ESX  flaws to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/45573 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119145 - Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload https://b3ncloud.net/article/45574 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119144 - Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields https://b3ncloud.net/article/45575 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119129 - ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval https://b3ncloud.net/article/45576 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119128 - ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie https://b3ncloud.net/article/45577 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119127 - ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection https://b3ncloud.net/article/45578 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119119 - Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields https://b3ncloud.net/article/45579 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119118 - Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags https://b3ncloud.net/article/45580 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions https://b3ncloud.net/article/45581 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-90868 - OS Command Injection in Progress WS_FTP Server https://b3ncloud.net/article/45582 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-90867 - Improper Access Control of Web Admin Console in Progress WS_FTP Server https://b3ncloud.net/article/45583 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-90866 - Virtual Folder Path Confinement Bypass in Progress WS_FTP Server https://b3ncloud.net/article/45584 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-90865 - Command Injection via FTP Notification Variables in Progress WS_FTP Server https://b3ncloud.net/article/45585 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-90864 - Host Administrator Path Containment Bypass in Progress WS_FTP Server https://b3ncloud.net/article/45586 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-90863 - Privilege Escalation via Missing Authorization in WS_FTP Manager https://b3ncloud.net/article/45587 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-84295 - Improper Authentication in Progress WS_FTP Server https://b3ncloud.net/article/45588 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-115793 - Resource exhaustion from RPC sessions kept for requests to unknown interface https://b3ncloud.net/article/45589 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-111736 - NULL pointer dereference on implicit read of user specific record index https://b3ncloud.net/article/45590 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-112200 - Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness https://b3ncloud.net/article/45591 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-111733 - NULL pointer dereference on implicit read of AR specific record index https://b3ncloud.net/article/45592 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-111732 - Out-of-bounds write when parsing AR Vendor Block requests https://b3ncloud.net/article/45593 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-111731 - Infinite loop when reading PDPortDataCheck record of subslot 0 https://b3ncloud.net/article/45594 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-112256 - Logon bypass (trust of attacker-controlled completed-methods list) https://b3ncloud.net/article/45595 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118082 - WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability https://b3ncloud.net/article/45597 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118080 - WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability https://b3ncloud.net/article/45596 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118081 - WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability https://b3ncloud.net/article/45598 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118076 - WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability https://b3ncloud.net/article/45564 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners https://b3ncloud.net/article/45565 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Claude AI Exploits Linux Kernel Flaw to Execute Root Commands Without User Interaction https://b3ncloud.net/article/45566 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI https://b3ncloud.net/article/45550 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Zero-Click ‘SMS of Death’ Flaw Lets Hackers Disrupt Android Phones With a Single Text https://b3ncloud.net/article/45551 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Microsoft fixes Remote Desktop failures caused by recent Windows updates https://b3ncloud.net/article/45617 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 UK surveillance watchdog ‘disappointed’ over government investigatory powers failings https://b3ncloud.net/article/45552 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Diverse kritische Schwachstellen in WatchGuard Fireware OS https://b3ncloud.net/article/45553 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-39736 - WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability https://b3ncloud.net/article/45554 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Cyberangriffe: menschliche Akteure in der Hauptrolle https://b3ncloud.net/article/45555 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks https://b3ncloud.net/article/45556 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Norton Antivirus: Schwachstelle ermöglicht Privilegieneskalation https://b3ncloud.net/article/45557 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-116399 - WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/45546 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities https://b3ncloud.net/article/45567 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities https://b3ncloud.net/article/45528 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 HTTP2Shell: Kritische Brotli-Schwachstelle gefährdet zahlreiche Anwendungen und IT-Infrastrukturen https://b3ncloud.net/article/45547 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Exploit Critical Cisco SD-WAN 0-Day Flaw to Deploy KeyDrift Malware and Steal Encryption Keys https://b3ncloud.net/article/45558 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-49142 - OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] https://b3ncloud.net/article/45559 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119050 - Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection https://b3ncloud.net/article/45560 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2019-25781 - Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing https://b3ncloud.net/article/45548 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense https://b3ncloud.net/article/45549 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Cyberangriff auf Fehmarnbelt-Tunnel-Gesellschaft: Cybergang meldet sich https://b3ncloud.net/article/45561 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-97860 - Yamaha VPN Client Unquoted Service Path Privilege Escalation https://b3ncloud.net/article/45562 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-103665 - Yamaha LAN Monitor DLL Hijacking Vulnerability https://b3ncloud.net/article/45599 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Having a PHP patch available does not mean you're protected https://b3ncloud.net/article/45529 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Claim Wagyu Crypto Platform Breach as Researchers Find Thousands of Monero Transaction Records https://b3ncloud.net/article/45530 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Dell PowerProtect Data Domain: Sieben kritische Schwachstellen bedrohen Backup-Systeme https://b3ncloud.net/article/45531 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls https://b3ncloud.net/article/45532 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-119028 - oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values https://b3ncloud.net/article/45533 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Adobe schließt teilweise kritische Lücken in vier Produkten https://b3ncloud.net/article/45534 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-97854 - Yamaha Wireless LAN Router OS Command Injection Vulnerability https://b3ncloud.net/article/45535 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories https://b3ncloud.net/article/45536 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Angriffsversuche auf junge Lücke in Oracle E-Business-Suite https://b3ncloud.net/article/45538 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-115964 - WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability https://b3ncloud.net/article/45537 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-115967 - WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability https://b3ncloud.net/article/45510 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 New Cisco firewall zero-day exploited to crash SSL VPN devices https://b3ncloud.net/article/45511 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Attack FreePBX Servers With Malware to Steal SIP Credentials for Phone Fraud https://b3ncloud.net/article/45512 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Have an older iPhone or iPad? Apple has a security update for you https://b3ncloud.net/article/45513 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net https://b3ncloud.net/article/45514 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Angreifer kapern 42 GitHub-Repositories für npm-Wurm-Kampagne „testmetest“ https://b3ncloud.net/article/45515 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls https://b3ncloud.net/article/45516 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Volt Typhoon Used Silent Train to Hide Zero-Day Attacks https://b3ncloud.net/article/45517 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards https://b3ncloud.net/article/45518 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network https://b3ncloud.net/article/45519 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 GitHub Launches npm Firewall to Block Malicious Packages Before Installation https://b3ncloud.net/article/45539 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-88941 - Kaspersky Security Center Network Agent Denial of Service Vulnerability https://b3ncloud.net/article/45520 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Sieben 0-Day-Lücken in Ultralytics: Remote Code Execution über Modelle, Datensätze und Downloads https://b3ncloud.net/article/45521 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-118375: Kritische Schwachstelle in llama.cpp gefährdet RPC-Server https://b3ncloud.net/article/45522 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Alpine iLX-F511: Elf Zero-Day-Schwachstellen in Infotainment-System ermöglichen Codeausführung https://b3ncloud.net/article/45523 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Cisco Catalyst SD-WAN: Authentifizierungsumgehung erlaubt Admin-Zugriff auf Controller https://b3ncloud.net/article/45501 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Wie Markenbildung und Zuordnung im Cybercrime funktioniert https://b3ncloud.net/article/45502 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Microsoft Urges Entra ID Admins to Migrate from SMS and Voice Authentication to Passkeys https://b3ncloud.net/article/45503 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August https://b3ncloud.net/article/45524 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-111419 - Hardcoded API Token in Foxit Official Website https://b3ncloud.net/article/45504 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Election Website Security: 42% of US County Sites Still Lack .gov Domains https://b3ncloud.net/article/45525 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-114358 - SQL Injection Vulnerability in Radius Xenia M2M Platform https://b3ncloud.net/article/45526 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open https://b3ncloud.net/article/45505 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff https://b3ncloud.net/article/45507 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Microsoft Edge: Mehrere Schwachstellen https://b3ncloud.net/article/45506 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Adobe Creative Cloud Desktop Application und Substance 3D Painter: Mehrere Schwachstellen https://b3ncloud.net/article/45508 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 ENGIE Data Breach Exposes Customer Details and Energy Contracts https://b3ncloud.net/article/45489 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Microsoft Edge Zero-Click Exploit Chains Five Flaws to Execute Windows Code and Escape Sandbox https://b3ncloud.net/article/45509 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Virtualine Domain Seized, but Allegedly Abusive Website Remains Online https://b3ncloud.net/article/45490 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 HCL Domino und Notes: Kompromittierte eMudhra-Zertifikate ermöglichen MITM-Angriffe https://b3ncloud.net/article/45491 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Use Fake Cloudflare Verification Pages to Target Windows and Mac Users https://b3ncloud.net/article/45492 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million https://b3ncloud.net/article/45493 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys https://b3ncloud.net/article/45494 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Top 10 Best Threat Intelligence Platforms (TIP) in 2026 [Ranked & Scored] https://b3ncloud.net/article/45495 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Top 10 Best SOAR Tools in 2026 [Ranked & Scored] https://b3ncloud.net/article/45496 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Infect 17,960 Android Phones With Banking Trojans, Steal 7.6 Million SMS Messages https://b3ncloud.net/article/45497 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Top 10 Best SIEM Tools in 2026 [Ranked & Scored] https://b3ncloud.net/article/45498 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day https://b3ncloud.net/article/45527 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Videosicherheit für NIS-2 und CER ganzheitlich denken https://b3ncloud.net/article/45499 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Drivelock zeigt KI-Agenten-Kontrolle und Cloud-Wahlfreiheit https://b3ncloud.net/article/45500 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2025-62841 - Hard-coded Cryptographic Key #2 https://b3ncloud.net/article/45486 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Angriffe auf Linux- und VMware-ESX-Schwachstellen https://b3ncloud.net/article/45484 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CISA Warns of VMWare ESX Logging Vulnerability Exploited in Attacks https://b3ncloud.net/article/45487 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility https://b3ncloud.net/article/45485 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices https://b3ncloud.net/article/45541 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-86794 - Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form https://b3ncloud.net/article/45540 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-89216 - vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter https://b3ncloud.net/article/45542 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-115245 - Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload https://b3ncloud.net/article/45544 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-113616 - LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset https://b3ncloud.net/article/45543 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-113617 - Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal https://b3ncloud.net/article/45545 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-103693 - Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection https://b3ncloud.net/article/45488 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces https://b3ncloud.net/article/45477 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers https://b3ncloud.net/article/45478 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-96228 - SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover https://b3ncloud.net/article/45479 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-109516 - Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token https://b3ncloud.net/article/45468 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents https://b3ncloud.net/article/45469 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks https://b3ncloud.net/article/45480 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-42922 - FUXA Authorization Bypass and Remote Code Execution https://b3ncloud.net/article/45470 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks https://b3ncloud.net/article/45471 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability https://b3ncloud.net/article/45472 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-113387 - Ortto WordPress Plugin Unauthenticated Configuration Injection Vulnerability https://b3ncloud.net/article/45473 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-66088 - Unrestricted Command Execution via system.execute https://b3ncloud.net/article/45483 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 KI und Security: Token-basierte Kosten im Griff behalten https://b3ncloud.net/article/45482 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 Schatten-KI zeigt Lücken in der KI-Strategie https://b3ncloud.net/article/45474 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 CVE-2026-21157 - Bixby Improper Input Validation Vulnerability https://b3ncloud.net/article/45646 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 DSA-6596-1 wordpress - security update https://b3ncloud.net/article/45627 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 DSA-6593-1 imagemagick - security update https://b3ncloud.net/article/45626 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 DSA-6594-1 python-git - security update https://b3ncloud.net/article/45625 2026-10-29 weekly 0.7 B3ncloud.net de 2026-10-29 DSA-6595-1 tor - security update https://b3ncloud.net/article/45454 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft Teams: IT-Support-Betrug schleust Malware und Ransomware in Unternehmen https://b3ncloud.net/article/45455 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-85749 - MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail https://b3ncloud.net/article/45456 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118579 - D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor https://b3ncloud.net/article/45457 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-61546 - AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools https://b3ncloud.net/article/45459 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118753 - FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing https://b3ncloud.net/article/45458 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118755 - Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path https://b3ncloud.net/article/45461 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118694 - python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations https://b3ncloud.net/article/45460 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118752 - FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder https://b3ncloud.net/article/45463 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118669 - OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client https://b3ncloud.net/article/45462 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118689 - OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length https://b3ncloud.net/article/45444 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-61572 - AVideo-Encoder: unauthenticated full-response server-side request forgery https://b3ncloud.net/article/45445 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-61567 - AVideo-Encoder: unauthenticated command execution through streamer login trust https://b3ncloud.net/article/45446 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-61564 - AVideo-Encoder: unauthenticated installer PHP code injection https://b3ncloud.net/article/45447 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-93851 - Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post https://b3ncloud.net/article/45448 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118668 - LangGraph JavaScript custom authentication may permit cross-user Store access https://b3ncloud.net/article/45451 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118660 - Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML https://b3ncloud.net/article/45450 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118664 - decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs https://b3ncloud.net/article/45449 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118665 - GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications https://b3ncloud.net/article/45452 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118690 - Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs https://b3ncloud.net/article/45475 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Neues LLM: Gemini 4 Carbon ist Exploit-Experte https://b3ncloud.net/article/45417 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw https://b3ncloud.net/article/45418 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail https://b3ncloud.net/article/45453 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-76418 - Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability https://b3ncloud.net/article/45419 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-117574 - Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization https://b3ncloud.net/article/45420 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-61542 - Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools https://b3ncloud.net/article/45421 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-63190 - FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS https://b3ncloud.net/article/45422 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-78674 - Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution https://b3ncloud.net/article/45423 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2025-14260 - Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources https://b3ncloud.net/article/45424 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-109411 - Samba: access control bypass via vfs_ceph_rgw case-insensitive open https://b3ncloud.net/article/45429 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118683 - MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf https://b3ncloud.net/article/45428 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118684 - MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads https://b3ncloud.net/article/45427 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118686 - EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex https://b3ncloud.net/article/45426 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118687 - Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication https://b3ncloud.net/article/45425 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118688 - Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename https://b3ncloud.net/article/45431 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118648 - n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy https://b3ncloud.net/article/45430 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118649 - n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables https://b3ncloud.net/article/45434 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118643 - n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data https://b3ncloud.net/article/45433 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118645 - n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter https://b3ncloud.net/article/45432 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118647 - n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data https://b3ncloud.net/article/45436 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118264 - Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls https://b3ncloud.net/article/45435 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118633 - Sophos UTM Path Traversal Remote Code Execution https://b3ncloud.net/article/45439 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118260 - Echo: BodyDump captures request and response bodies without size limits in v4 https://b3ncloud.net/article/45438 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118261 - Echo: Decompress permits unbounded gzip expansion in v4 https://b3ncloud.net/article/45437 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118262 - Echo: WebSocket proxy can retain connections and handlers after client disconnect https://b3ncloud.net/article/45443 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118252 - Highcharts Dashboards: sidebar component labels are parsed as HTML https://b3ncloud.net/article/45442 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118253 - Highcharts Dashboards: fullscreen labels are parsed as HTML https://b3ncloud.net/article/45441 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118254 - Highcharts Grid: pagination language options are parsed as HTML https://b3ncloud.net/article/45440 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118255 - Highcharts Grid: javascript: URL in credits.href runs script on click https://b3ncloud.net/article/45398 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns https://b3ncloud.net/article/45392 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery https://b3ncloud.net/article/45399 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-84725 - Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap https://b3ncloud.net/article/45393 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Sieben kritische Fireware-OS-Lücken in WatchGuard Firebox: mehrere RCE-Risiken mit CVSS bis 9,5 https://b3ncloud.net/article/45400 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118619 - Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability https://b3ncloud.net/article/45401 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118610 - Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability https://b3ncloud.net/article/45403 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118605 - Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability https://b3ncloud.net/article/45402 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118606 - Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability https://b3ncloud.net/article/45404 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118510 - Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs https://b3ncloud.net/article/45394 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Adobe Campaign Classic und Adobe Connect: Kritische CVEs bis CVSS 10.0 gemeldet https://b3ncloud.net/article/45405 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-106079 - Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration https://b3ncloud.net/article/45406 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103506 - SSO settings authorization bypass https://b3ncloud.net/article/45407 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103409 - Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed https://b3ncloud.net/article/45409 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103407 - Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management https://b3ncloud.net/article/45408 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103408 - Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options https://b3ncloud.net/article/45410 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103406 - Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. https://b3ncloud.net/article/45413 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103401 - Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root https://b3ncloud.net/article/45412 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103402 - Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation https://b3ncloud.net/article/45411 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103403 - Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules https://b3ncloud.net/article/45395 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS https://b3ncloud.net/article/45416 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. https://b3ncloud.net/article/45380 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Sony ISP subsidiary data breach exposes 2.5 million customer records https://b3ncloud.net/article/45396 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win https://b3ncloud.net/article/45414 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-44179 - XWiki Pro Macros: excerpt-include title and content injection executes code https://b3ncloud.net/article/45415 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-112357 - GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation https://b3ncloud.net/article/45381 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions https://b3ncloud.net/article/45382 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network https://b3ncloud.net/article/45383 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Volt Typhoon hides zero-day attacks using 'Silent Train' framework https://b3ncloud.net/article/45384 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions https://b3ncloud.net/article/45385 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116778 - FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution https://b3ncloud.net/article/45370 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript https://b3ncloud.net/article/45386 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-59979 - YosemiteCrew: Missing organization authorization on service and PMS library/template routes https://b3ncloud.net/article/45371 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 PropellerAds: Why Modern Malware Delivery Starts Before the Payload https://b3ncloud.net/article/45372 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test https://b3ncloud.net/article/45373 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Defenders need more time to patch with the influx of patching hitting operations https://b3ncloud.net/article/45374 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Offengelegte Zugangsdaten bleiben jahrelang nutzbar https://b3ncloud.net/article/45375 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 HiRDB: Sechs kritische Schwachstellen erlauben Angriffe ohne Anmeldung https://b3ncloud.net/article/45376 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-65145: Kritische Lücke in NVIDIA NeMo Agent Toolkit ermöglicht Angriffe ohne Anmeldung https://b3ncloud.net/article/45377 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft urges Entra ID admins to migrate users to passkeys https://b3ncloud.net/article/45378 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users https://b3ncloud.net/article/45352 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115968 - WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/45351 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115603 - WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability https://b3ncloud.net/article/45353 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116389 - WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability https://b3ncloud.net/article/45354 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 InfraTrust report warns of exploited flaws in critical network infrastructure https://b3ncloud.net/article/45355 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Even after PHP2Shell, blast radius matters more than a CVSS score https://b3ncloud.net/article/45356 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities https://b3ncloud.net/article/45357 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime https://b3ncloud.net/article/45358 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Chrome and Firefox Updates Patch Over 200 Vulnerabilities https://b3ncloud.net/article/45359 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116078 - HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit https://b3ncloud.net/article/45397 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Lapsed US snooping law still running as senators object https://b3ncloud.net/article/45360 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-105420 - Path Traversal in Wing WFTP Server leading to Remote Code Execution https://b3ncloud.net/article/45361 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-67074 - HCL BigFix AEX is affected by multiple security vulnerabilities. https://b3ncloud.net/article/45363 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115904 - Topluyo Desktop for Linux has an OS Command Injection issue https://b3ncloud.net/article/45362 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116391 - WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability https://b3ncloud.net/article/45366 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-111411 - WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability https://b3ncloud.net/article/45365 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-111850 - WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability https://b3ncloud.net/article/45364 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115607 - WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability https://b3ncloud.net/article/45337 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-108142 https://b3ncloud.net/article/45367 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-93517 - X.Org Server GLX RenderLarge Heap Buffer Overflow https://b3ncloud.net/article/45338 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft Authenticator: Bösartige Apps konnten Zugangstoken abgreifen https://b3ncloud.net/article/45339 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Use Fake Court Notices to Deliver XWorm Malware Through Hidden Windows Scripts https://b3ncloud.net/article/45368 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch https://b3ncloud.net/article/45340 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Claude AI Builds One-Click Chrome and 0-Click Linux Exploit Chains, Bypasses Android Lock Screen https://b3ncloud.net/article/45341 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers now scanning systems for recently-patched Oracle flaw https://b3ncloud.net/article/45328 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 China-Linked Hackers Exploit PHP2Shell to Root Firewalls https://b3ncloud.net/article/45342 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-102790 - Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 https://b3ncloud.net/article/45343 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-114278 - Unauthenticated Command Injection via kubeconfig Username in che-machine-exec https://b3ncloud.net/article/45369 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers https://b3ncloud.net/article/45329 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Tailscale SSH: „Tailworm“-Lücke führt zu Root-Rechten und Kompromittierung https://b3ncloud.net/article/45330 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability https://b3ncloud.net/article/45379 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Wazuh and AI for Enhanced SOC Workflows https://b3ncloud.net/article/45344 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118485 - Axel Download Accelerator Path Traversal via URL Filename Decoding https://b3ncloud.net/article/45345 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86378 - Dell PowerProtect Data Domain Stack-based Buffer Overflow Vulnerability https://b3ncloud.net/article/45347 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-112197 - Missing Authentication for Critical Function in Tactis' NoviGest Desktop App https://b3ncloud.net/article/45346 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-112198 - Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App https://b3ncloud.net/article/45349 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103792 - Dell PowerProtect Data Domain Management Center SQL Injection Vulnerability https://b3ncloud.net/article/45348 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103799 - Dell PowerProtect Data Domain Management Center Missing Authorization Vulnerability https://b3ncloud.net/article/45331 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers https://b3ncloud.net/article/45332 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass https://b3ncloud.net/article/45333 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Chrome and Firefox updates fix serious security flaws. Install them now https://b3ncloud.net/article/45350 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118477 - KaliFast Project Management Platform ei_git_repo_url OS Command Injection https://b3ncloud.net/article/45313 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Compromise Camera Management Software to Deploy Malware on Windows Computers https://b3ncloud.net/article/45314 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Long-Hidden Flaws Patched in EPICS Research Facility Control Software https://b3ncloud.net/article/45315 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CISA warns of hackers now exploiting critical Node2Shell flaw https://b3ncloud.net/article/45316 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Actively Exploiting New Oracle EBS RCE Vulnerability https://b3ncloud.net/article/45334 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed https://b3ncloud.net/article/45317 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 FortiBleed 2.0 Reveals Thousands of Fortinet VPN and Active Directory Credentials in Exposed Configurations https://b3ncloud.net/article/45318 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/45319 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Wenn KI zur Nutzergruppe wird https://b3ncloud.net/article/45320 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 eMudhra-TLS-Leck: Apple lässt Problem auf macOS-Kommandozeile zunächst bestehen https://b3ncloud.net/article/45321 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86384 - Dell PowerProtect Data Domain Use of Hard-coded Cryptographic Key Vulnerability https://b3ncloud.net/article/45304 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft Releases Emergency Windows Updates to Block Compromised eMudhra Certificates https://b3ncloud.net/article/45305 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Use CyberStrikeAI Agents to Automate Network Scanning, Exploitation, and Data Theft https://b3ncloud.net/article/45322 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86385 - Dell PowerProtect Data Domain Improper Privilege Management Vulnerability https://b3ncloud.net/article/45306 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Nefilim and Hive ransomware affiliate gets 70 months in prison https://b3ncloud.net/article/45335 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History https://b3ncloud.net/article/45307 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks https://b3ncloud.net/article/45308 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Angreifer können Veeam-Backup-Server manipulieren und MFA deaktivieren https://b3ncloud.net/article/45324 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86400 - Dell PowerProtect Data Domain Improper Authentication Vulnerability