https://b3ncloud.net/ daily 1.0 2026-10-27 https://b3ncloud.net/news hourly 0.9 2026-10-27 https://b3ncloud.net/tools monthly 0.8 2026-10-27 https://b3ncloud.net/tools/ip-lookup monthly 0.7 2026-10-27 https://b3ncloud.net/tools/dns-lookup monthly 0.7 2026-10-27 https://b3ncloud.net/tools/ip-info monthly 0.7 2026-10-27 https://b3ncloud.net/tools/url-parser monthly 0.6 2026-10-27 https://b3ncloud.net/tools/http-status-codes monthly 0.6 2026-10-27 https://b3ncloud.net/tools/common-ports monthly 0.6 2026-10-27 https://b3ncloud.net/tools/ip-range-calculator monthly 0.6 2026-10-27 https://b3ncloud.net/tools/dns-leak-test monthly 0.7 2026-10-27 https://b3ncloud.net/search daily 0.7 2026-10-27 https://b3ncloud.net/breach-check monthly 0.7 2026-10-27 https://b3ncloud.net/leak-monitor monthly 0.7 2026-10-27 https://b3ncloud.net/phishing-check monthly 0.7 2026-10-27 https://b3ncloud.net/ioc monthly 0.7 2026-10-27 https://b3ncloud.net/ssl monthly 0.7 2026-10-27 https://b3ncloud.net/header monthly 0.7 2026-10-27 https://b3ncloud.net/cve-search weekly 0.8 2026-10-27 https://b3ncloud.net/vulnerability-check weekly 0.7 2026-10-27 https://b3ncloud.net/mitre weekly 0.7 2026-10-27 https://b3ncloud.net/intel daily 0.8 2026-10-27 https://b3ncloud.net/cheatsheets monthly 0.7 2026-10-27 https://b3ncloud.net/dkb weekly 0.7 2026-10-27 https://b3ncloud.net/security-checklist monthly 0.6 2026-10-27 https://b3ncloud.net/incident-response monthly 0.6 2026-10-27 https://b3ncloud.net/firewall-rules monthly 0.6 2026-10-27 https://b3ncloud.net/regex monthly 0.6 2026-10-27 https://b3ncloud.net/cron monthly 0.6 2026-10-27 https://b3ncloud.net/log-analyzer monthly 0.6 2026-10-27 https://b3ncloud.net/subnet monthly 0.6 2026-10-27 https://b3ncloud.net/troubleshooting monthly 0.6 2026-10-27 https://b3ncloud.net/darknet weekly 0.7 2026-10-27 https://b3ncloud.net/stats daily 0.7 2026-10-27 https://b3ncloud.net/updates weekly 0.5 2026-10-27 https://b3ncloud.net/updates/feed.xml hourly 0.6 2026-10-27 https://b3ncloud.net/feed.xml hourly 0.6 2026-10-27 https://b3ncloud.net/cves/feed.xml hourly 0.6 2026-10-27 https://b3ncloud.net/impressum yearly 0.2 2026-10-27 https://b3ncloud.net/datenschutz yearly 0.2 2026-10-27 https://b3ncloud.net/article/45251 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112346: Kritische RCE in OpenHands Agent SDK vor Version 1.52.0 https://b3ncloud.net/article/45252 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers hijack Convertr analytics script to steal payment card data https://b3ncloud.net/article/45243 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112352 - Sunhillo SureLine Authentication Bypass via Session Cookie https://b3ncloud.net/article/45244 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112351 - Sunhillo SureLine OS Command Injection via networkDiag.cgi https://b3ncloud.net/article/45245 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112350 - Sunhillo SureLine Path Traversal via radarUpdater.cgi https://b3ncloud.net/article/45246 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116688 - CKEditor: Cross-site scripting (XSS) in the engine package https://b3ncloud.net/article/45247 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112355 - MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API https://b3ncloud.net/article/45248 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters https://b3ncloud.net/article/45218 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking https://b3ncloud.net/article/45219 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets https://b3ncloud.net/article/45220 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Microsoft releases Windows OOB updates to distrust eMudhra certificates https://b3ncloud.net/article/45249 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-57202 - Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes https://b3ncloud.net/article/45250 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116676 - Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan https://b3ncloud.net/article/45221 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116682 - FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory https://b3ncloud.net/article/45213 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts https://b3ncloud.net/article/45222 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102814 - Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 https://b3ncloud.net/article/45223 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108303 - Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. https://b3ncloud.net/article/45224 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108329 - Tanium addressed an unauthorized code execution vulnerability in Threat Response. https://b3ncloud.net/article/45214 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Before Your SOC Investigates: What 16K+ Security Teams Already Know https://b3ncloud.net/article/45216 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86990 https://b3ncloud.net/article/45215 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112697 https://b3ncloud.net/article/45225 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-48360 - Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) https://b3ncloud.net/article/45228 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-114598 - Access of resource using incompatible type ('type confusion') in EPICS Base https://b3ncloud.net/article/45227 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116672 - Authlib RFC 7592 examples omit registration-access-token client binding https://b3ncloud.net/article/45226 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116675 - TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization https://b3ncloud.net/article/45231 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112353 - GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment https://b3ncloud.net/article/45230 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-114596 - Integer overflow or wraparound in EPICS Base https://b3ncloud.net/article/45229 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-114597 - Improper handling of length parameter inconsistency in EPICS Base https://b3ncloud.net/article/45234 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108014 - eMudhra Compromised Certficate vulnerability impacts HCL Domino Server https://b3ncloud.net/article/45233 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108015 - eMudhra Compromised Certficate vulnerability impacts HCL Notes Client https://b3ncloud.net/article/45232 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108142 - CDP Coordinator Service Authorization Bypass https://b3ncloud.net/article/45239 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-105780 - Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) https://b3ncloud.net/article/45238 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-105781 - Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) https://b3ncloud.net/article/45237 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-106076 - Veeam Backup for Microsoft 365 SQL Injection Vulnerability https://b3ncloud.net/article/45236 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-106077 - Veeam Backup for Microsoft 365 Arbitrary File Read Vulnerability https://b3ncloud.net/article/45235 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-107671 - Multi-Factor Authentication Bypass via Administrator Privilege Escalation https://b3ncloud.net/article/45241 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-104351 - Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) https://b3ncloud.net/article/45240 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-104353 - Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) https://b3ncloud.net/article/45217 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Critical GoAhead TLS Flaws Could Expose Hundreds of Millions of Devices to Attacks https://b3ncloud.net/article/45203 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Researchers Exploit OpenAI API Flaw to Extract Hidden GPT-5.6 Reasoning Traces https://b3ncloud.net/article/45204 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 USN-8957-1: authd vulnerability https://b3ncloud.net/article/45205 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-107672 - Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility https://b3ncloud.net/article/45206 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116863 - WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/45207 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-103594 - Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution https://b3ncloud.net/article/45185 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws https://b3ncloud.net/article/45186 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-93328: Kritische Lücke in Google Cloud MCP Toolbox ermöglicht Dateidiebstahl und Überschreiben lokaler Dateien https://b3ncloud.net/article/45187 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-115905: Kritische Rust-ZIP-Schwachstelle in zip bis 9.0.4 erlaubt Dateipfad-Manipulation https://b3ncloud.net/article/45208 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-111585 - Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow https://b3ncloud.net/article/45188 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112507 https://b3ncloud.net/article/45209 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117604 - Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback https://b3ncloud.net/article/45210 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-92372 - Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution https://b3ncloud.net/article/45189 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Weniger Angriffe, aber fast jede Malware ist ein Einzelstück https://b3ncloud.net/article/45178 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Use Fake FedEx Invoices to Deploy Sirius Backdoor and Evade Windows Security https://b3ncloud.net/article/45179 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-84496 https://b3ncloud.net/article/45211 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-118008 - Privilege escalation in the DOM: Navigation component https://b3ncloud.net/article/45191 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117602 - Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution https://b3ncloud.net/article/45190 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117603 - Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass https://b3ncloud.net/article/45194 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117569 - Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters https://b3ncloud.net/article/45193 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117573 - hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools https://b3ncloud.net/article/45192 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117601 - Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions https://b3ncloud.net/article/45197 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117560 - ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools https://b3ncloud.net/article/45196 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117561 - sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values https://b3ncloud.net/article/45195 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117564 - nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret https://b3ncloud.net/article/45199 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117558 - ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status https://b3ncloud.net/article/45198 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117559 - DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass https://b3ncloud.net/article/45242 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 PHP2Shell: US updates Kev catalogue as exploits spread https://b3ncloud.net/article/45180 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Tailscale warns of SSH flaws allowing root privilege escalation https://b3ncloud.net/article/45181 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Abuse Signed ChatGPT and Claude Binaries to Deploy Malware Through Fake GitHub Downloads https://b3ncloud.net/article/45182 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest https://b3ncloud.net/article/45212 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads https://b3ncloud.net/article/45183 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court https://b3ncloud.net/article/45202 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65119 - NVIDIA TensorRT-LLM for any platform contains a vu https://b3ncloud.net/article/45201 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65145 - NVIDIA NeMo Agent Toolkit contains a vulnerability https://b3ncloud.net/article/45200 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65151 - NVIDIA NeMo Agent Toolkit contains vulnerability w https://b3ncloud.net/article/45184 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 HPE Patches Dozens of Critical Flaws in Networking Products https://b3ncloud.net/article/45157 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Dell BIOS: Mehrere Schwachstellen https://b3ncloud.net/article/45158 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Mozilla Firefox (iOS): Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen https://b3ncloud.net/article/45159 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple iOS, iPadOS, macOS und Safari: Mehrere Schwachstellen https://b3ncloud.net/article/45160 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 The web’s having a rough week. Here’s how to browse safely https://b3ncloud.net/article/45161 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens https://b3ncloud.net/article/45162 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-106087 - TRO600 contains an arbitrary file read vulnerabili https://b3ncloud.net/article/45153 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 https://b3ncloud.net/article/45163 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key https://b3ncloud.net/article/45154 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges https://b3ncloud.net/article/45164 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-115216 - Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials https://b3ncloud.net/article/45165 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 AI-Generated Fake Login Pages Are Making Account Takeovers Easier https://b3ncloud.net/article/45166 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption https://b3ncloud.net/article/45167 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112362 - @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets https://b3ncloud.net/article/45169 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117536 - REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation https://b3ncloud.net/article/45168 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117540 - svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop https://b3ncloud.net/article/45171 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117466 - Octopus Server Privilege Escalation Vulnerability https://b3ncloud.net/article/45170 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117532 - REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin https://b3ncloud.net/article/45172 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116878 - Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity https://b3ncloud.net/article/45175 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116870 - Octopus Server OIDC Token Issuer Validation Bypass https://b3ncloud.net/article/45174 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116871 - Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask https://b3ncloud.net/article/45173 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116872 - Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters https://b3ncloud.net/article/45155 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple iOS 27.2 Released With Fixes for 163 Vulnerabilities, Including Fix for Critical WebKit RCE https://b3ncloud.net/article/45176 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102800 - Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 https://b3ncloud.net/article/45177 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-4337 - Unrestricted Upload of File in PuMuKIT application https://b3ncloud.net/article/45156 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Wenn der legitime Login zum Angriffspfad wird https://b3ncloud.net/article/45116 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Exeon AgentGuard: Sicherheitslösung erkennt Schatten-KI, Datenlecks und riskantes Agentenverhalten https://b3ncloud.net/article/45127 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys https://b3ncloud.net/article/45128 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/45129 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple backports CoreGraphics zero-day patches to older iPhones https://b3ncloud.net/article/45130 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 This is Fine: What NetScaler Zero-Days Tell Us About the New Normal https://b3ncloud.net/article/45117 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP https://b3ncloud.net/article/45118 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover https://b3ncloud.net/article/45131 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones https://b3ncloud.net/article/45107 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Check Point startet Firewall-as-a-Subscription mit KI-Schutz und flexiblem Abonnement https://b3ncloud.net/article/45132 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82117 - Authentication Bypass by Spoofing Vulnerability in HiRDB https://b3ncloud.net/article/45133 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82116 - Missing Authentication for Critical Function Vulnerability in HiRDB https://b3ncloud.net/article/45134 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82118 - Stack-based Buffer Overflow Vulnerability in HiRDB https://b3ncloud.net/article/45135 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82120 - Heap-based Buffer Overflow Vulnerability in HiRDB https://b3ncloud.net/article/45136 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82119 - OS Command Injection Vulnerability in HiRDB https://b3ncloud.net/article/45137 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82122 - Stack-based Buffer Overflow Vulnerability in HiRDB https://b3ncloud.net/article/45138 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-76939 - Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 https://b3ncloud.net/article/45139 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-76936 - Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 https://b3ncloud.net/article/45140 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-76938 - Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 https://b3ncloud.net/article/45141 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86577 - Out-of-bounds Write Vulnerability in JP1 Products https://b3ncloud.net/article/45142 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86576 - Heap-based Buffer Overflow Vulnerability in JP1 Products https://b3ncloud.net/article/45143 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86574 - Heap-based Buffer Overflow Vulnerability in JP1/Base https://b3ncloud.net/article/45119 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers https://b3ncloud.net/article/45144 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102788 - Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 https://b3ncloud.net/article/45120 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Energy giant ENGIE discloses data breach affecting customers https://b3ncloud.net/article/45145 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102789 - Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 https://b3ncloud.net/article/45146 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117494 - Multiple vulnerabilities in Sisense’s Cloud BI Platform https://b3ncloud.net/article/45147 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-92885 - Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login https://b3ncloud.net/article/45148 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records https://b3ncloud.net/article/45121 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-115727: Kritische RCE-Lücke in AgenticSeek vor Commit 409840c https://b3ncloud.net/article/45122 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-107092: Kritische Directory-Traversal-Lücke in NexoPOS 6.2.4 https://b3ncloud.net/article/45149 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-85299 - Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration https://b3ncloud.net/article/45150 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers https://b3ncloud.net/article/45108 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DreamHost Forces Email and FTP Password Resets Following Unexplained Security Incident https://b3ncloud.net/article/45109 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CISA confirms PHP2Shell vulnerabilities now exploited in attacks https://b3ncloud.net/article/45110 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Top 10 Best Confidential Computing Platforms in 2026 [Ranked & Scored] https://b3ncloud.net/article/45111 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65220 - Supermicro BMC IPMI feature contains a Privilege escalation vulnerability https://b3ncloud.net/article/45112 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 php2shell: Erfolgreiche Angriffe auf PHP-Schwachstelle bestätigt https://b3ncloud.net/article/45123 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 KI unter Kontrolle https://b3ncloud.net/article/45113 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Infect 953 Online Stores With Malicious JavaScript That Evades Security Scanners https://b3ncloud.net/article/45114 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-18450 - Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability https://b3ncloud.net/article/45102 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Impersonate IT Support on Microsoft Teams to Gain Remote Access to Employees’ PCs https://b3ncloud.net/article/45103 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-113946 https://b3ncloud.net/article/45115 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-75891 - Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint https://b3ncloud.net/article/45104 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems https://b3ncloud.net/article/45151 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 AfD - 345,439 breached accounts https://b3ncloud.net/article/45105 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Hijack Microsoft 365 Accounts at 79 Organizations Using Stolen Login Tokens https://b3ncloud.net/article/45152 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 AI World: AI vulnerability surge brings change for Oracle’s cyber practice https://b3ncloud.net/article/45106 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses https://b3ncloud.net/article/45097 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112622 https://b3ncloud.net/article/45096 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112457 https://b3ncloud.net/article/45098 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Use AI Agents to Target Over 2,250 Microsoft 365 Tenants Through ConnectWise https://b3ncloud.net/article/45099 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Kritische Atlassian-Schwachstelle mit unklarer Kennung https://b3ncloud.net/article/45100 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 OpenAI Codex Breaks USB Encryption in Minutes, Exposing Hardcoded Keys and Security Flaws https://b3ncloud.net/article/45093 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking https://b3ncloud.net/article/45094 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Abuse Claude’s Official Website and Google Ads to Spread Malware https://b3ncloud.net/article/45101 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution https://b3ncloud.net/article/45089 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials https://b3ncloud.net/article/45090 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users https://b3ncloud.net/article/45091 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone https://b3ncloud.net/article/45092 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-84498 https://b3ncloud.net/article/45075 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apache Camel Fixes Multiple Vulnerabilities Including High-Severity XXE One’s https://b3ncloud.net/article/45076 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 New DarkCore RAT Targets Gmail and WhatsApp Sessions While Hiding Behind Victims’ IP Addresses https://b3ncloud.net/article/45077 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112443 https://b3ncloud.net/article/45078 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors https://b3ncloud.net/article/45071 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Revive BlackLotus Techniques to Bypass Windows Secure Boot and Deploy Malware https://b3ncloud.net/article/45079 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116843 - Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode https://b3ncloud.net/article/45083 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116816 - llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer https://b3ncloud.net/article/45082 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116836 - Ubiquiti airMAX M Stored Cross-Site Scripting Privilege Escalation https://b3ncloud.net/article/45081 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116837 - Ubiquiti airMAX M, LTU, SolarPoint, and SolarSwitch Heap-based Buffer Overflow https://b3ncloud.net/article/45080 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116838 - Ubiquiti airMAX M Cross-Site Request Forgery to Command Injection https://b3ncloud.net/article/45084 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2024-58400 - llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs https://b3ncloud.net/article/45073 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112511 https://b3ncloud.net/article/45072 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112482 https://b3ncloud.net/article/45074 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Use VLC Media Player and VMware Tools to Load Malware Through DLL Side-Loading https://b3ncloud.net/article/45086 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116826 - YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile https://b3ncloud.net/article/45085 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116827 - YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import https://b3ncloud.net/article/45087 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116825 - YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox https://b3ncloud.net/article/45088 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116808 - OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values https://b3ncloud.net/article/45124 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DSA-6586-1 valkey - security update https://b3ncloud.net/article/45056 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116819 - OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query https://b3ncloud.net/article/45057 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116818 - OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket https://b3ncloud.net/article/45058 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116811 - OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template https://b3ncloud.net/article/45042 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 University of Copenhagen data breach exposes data of 525,000 people https://b3ncloud.net/article/45061 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116588 - Datadog dd-trace-py: ReDOS in URL query string obfuscation https://b3ncloud.net/article/45060 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116589 - Datadog dd-trace-py: IAST instrumentation can lead to application DOS https://b3ncloud.net/article/45059 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116591 - compress zstd: Panic on two-block frames https://b3ncloud.net/article/45062 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116508 - TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow https://b3ncloud.net/article/45044 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116747 - Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret https://b3ncloud.net/article/45043 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116748 - Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token https://b3ncloud.net/article/45045 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116741 - Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes https://b3ncloud.net/article/45046 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116738 - VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder https://b3ncloud.net/article/45047 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116724 - FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow https://b3ncloud.net/article/45048 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116723 - FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field https://b3ncloud.net/article/45063 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-86929 - Apple macOS Out-of-Bounds Write Vulnerability https://b3ncloud.net/article/45064 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-65327 - Apple macOS Privilege Escalation Vulnerability https://b3ncloud.net/article/45065 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-64759 - Apple Image Processing Integer Overflow Vulnerability https://b3ncloud.net/article/45049 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116506 - TOTOLINK A950RG firewall.so apmib_set command injection https://b3ncloud.net/article/45051 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116504 - TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection https://b3ncloud.net/article/45050 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116505 - TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection https://b3ncloud.net/article/45052 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-113947 - Apple macOS Archive Processing Arbitrary Code Execution https://b3ncloud.net/article/45066 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112688 - Apple iOS, iPadOS, and macOS Memory Corruption Vulnerability https://b3ncloud.net/article/45068 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112655 - Apple WebKit Use-After-Free Vulnerability https://b3ncloud.net/article/45067 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112659 - Apple Safari Type Confusion Vulnerability https://b3ncloud.net/article/45069 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112651 - Apple Safari Use-After-Free Vulnerability https://b3ncloud.net/article/45070 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112637 - Apple Safari and Operating Systems Use-After-Free Vulnerability https://b3ncloud.net/article/45053 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Magento Campaign Infects 953 Online Stores Across Five Domains https://b3ncloud.net/article/45038 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI https://b3ncloud.net/article/45036 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Cisco Rethinks Privileged Infrastructure Access https://b3ncloud.net/article/45039 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115924 - Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs https://b3ncloud.net/article/45040 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110720 - Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules https://b3ncloud.net/article/45037 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento https://b3ncloud.net/article/45022 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116634 - OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens https://b3ncloud.net/article/45023 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-10757 - BUG-000187511 - ArcGIS Server has a security vulnerability. https://b3ncloud.net/article/45024 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-83519: Kritische Windows-Lücke in der Fehlerberichterstattung ermöglicht Codeausführung https://b3ncloud.net/article/45025 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-105608 - Consul vulnerable to an authorization bypass in service mesh registration https://b3ncloud.net/article/45019 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Cloudflare-Chef erwartet etliche weitere Lücken wie php2shell https://b3ncloud.net/article/45026 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-71456 - Johnson Controls Kantech Entrapass Hard-coded Cryptographic Key Vulnerability https://b3ncloud.net/article/45027 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115905 - zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE https://b3ncloud.net/article/45028 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115915 - vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE https://b3ncloud.net/article/45054 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft Investigation Teams Issue Affecting Users in the United States https://b3ncloud.net/article/45029 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-102649 - Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset https://b3ncloud.net/article/45030 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-72753 - Routinator incorrectly handles delta updates https://b3ncloud.net/article/45003 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder https://b3ncloud.net/article/45041 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 EU makes progress towards PHP patching, UK lags behind https://b3ncloud.net/article/45004 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches https://b3ncloud.net/article/45095 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 UK secrecy over AI in immigration and asylum decisions under fire https://b3ncloud.net/article/45034 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116539 - Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO https://b3ncloud.net/article/45033 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116540 - netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback https://b3ncloud.net/article/45032 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116541 - netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount https://b3ncloud.net/article/45031 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116543 - Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser https://b3ncloud.net/article/45005 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 OpenBSD 8.0 Released With Major Security Hardening and Post-Quantum SSH Support https://b3ncloud.net/article/45006 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Emperador Ransomware Group Claims to Have Stolen 3.9GB of Data from the Maker of Budweiser and Corona https://b3ncloud.net/article/45020 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 USN-8956-1: Brotli vulnerability https://b3ncloud.net/article/45007 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112343 - Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing https://b3ncloud.net/article/45035 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware https://b3ncloud.net/article/45008 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft releases emergency .NET patches for critical Brotli flaw https://b3ncloud.net/article/45009 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112346 - OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE https://b3ncloud.net/article/45021 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 USN-8955-1: nginx vulnerabilities https://b3ncloud.net/article/44971 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell: Filigran bewertet die kritischen PHP-Sicherheitslücken https://b3ncloud.net/article/45010 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-93328 - Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write https://b3ncloud.net/article/45012 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77055 - Improper Privilege Assignment in boneIO https://b3ncloud.net/article/45011 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77059 - TOCTOU Race Condition in boneIO https://b3ncloud.net/article/45014 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77052 - Missing Authentication for Node-RED in boneIO https://b3ncloud.net/article/45013 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77053 - Missing Authentication in Default Configuration in boneIO https://b3ncloud.net/article/45015 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-65184 - Avocent ACS8000 wsserver command injection https://b3ncloud.net/article/45016 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112345 - TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure https://b3ncloud.net/article/45017 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115748 - Apache Vysper: Authorization bypass https://b3ncloud.net/article/44977 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Angreifer verstecken Schadcode in öffentlicher Google-Tabelle https://b3ncloud.net/article/44978 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Industrial Vendors Check Products for PHP2Shell Vulnerabilities https://b3ncloud.net/article/44979 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Researchers Use AI Agents to Breach Anthropic’s Internal Systems in Just 12 Hours https://b3ncloud.net/article/45018 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116219 - Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter https://b3ncloud.net/article/44972 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans https://b3ncloud.net/article/44980 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More https://b3ncloud.net/article/44973 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 When an AI Agent Is the Incident, the Identity Record Is the Evidence https://b3ncloud.net/article/44981 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-97200 - Unbounded response body buffering and decompression in hackney https://b3ncloud.net/article/44982 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115693 - Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney https://b3ncloud.net/article/44974 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Popcorn Time’s forgotten updater left millions of devices exposed to hijacking https://b3ncloud.net/article/44983 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-107656 - Fortinet FortiSandbox Authentication Bypass https://b3ncloud.net/article/44984 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-108529 - SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit https://b3ncloud.net/article/44985 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-59107 - Shared SSH Authentication Key in vSolution Matrix File Sharing https://b3ncloud.net/article/44986 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110499 - Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit https://b3ncloud.net/article/44987 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-109584 - HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit https://b3ncloud.net/article/44988 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111103 - HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit https://b3ncloud.net/article/44989 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111101 - HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit https://b3ncloud.net/article/44990 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-113436 - Quadratic bignum parsing of Content-Length and Host port values in Bandit https://b3ncloud.net/article/44991 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-114213 - WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit https://b3ncloud.net/article/44992 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115269 - HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit https://b3ncloud.net/article/44975 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell Exploitation Moves From Probes to Working Shells https://b3ncloud.net/article/44993 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-108525 - HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit https://b3ncloud.net/article/44976 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability https://b3ncloud.net/article/44994 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-59106 - Unauthenticated RCE Vulnerability in WolfProt interface implementation https://b3ncloud.net/article/44995 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116485 - danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints https://b3ncloud.net/article/44996 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116214 - MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code https://b3ncloud.net/article/44963 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Snipe-IT: Kritische Authentifizierungsumgehung in Versionen vor 8.6.3 https://b3ncloud.net/article/44964 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111594: InterSystems IRIS for Health mit kritischer Standardkonfiguration bei TLS https://b3ncloud.net/article/44965 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 953 Online Stores Infected in Long-Lasting Malware Campaign https://b3ncloud.net/article/44997 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115193 - Mautic Stored Cross-Site Scripting https://b3ncloud.net/article/44998 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115190 - Mautic Insecure Deserialization Vulnerability https://b3ncloud.net/article/44999 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115189 - Mautic Server-Side Template Injection Vulnerability https://b3ncloud.net/article/44967 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 VLC für Android: Schwachstelle ermöglicht Manipulation von Dateien https://b3ncloud.net/article/44966 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Oracle Java SE: Schwachstelle ermöglicht Offenlegung von Informationen https://b3ncloud.net/article/45000 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115188 - Mautic Unrestricted File Upload Remote Code Execution https://b3ncloud.net/article/45001 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110475 - Improper Authentication Vulnerability in CreditNirvana Collections Platform https://b3ncloud.net/article/44968 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram https://b3ncloud.net/article/45002 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110474 - Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application https://b3ncloud.net/article/44969 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes https://b3ncloud.net/article/44958 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses https://b3ncloud.net/article/44970 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-94380 - Host Header Injection in HAVELSAN's Liman MYS https://b3ncloud.net/article/44959 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115608 - WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability https://b3ncloud.net/article/44943 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1 https://b3ncloud.net/article/44942 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Kali Linux 2026.3 released with 6 new tools, desktop updates https://b3ncloud.net/article/44944 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages https://b3ncloud.net/article/44945 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Python schließt per Update kritische TLS-Lücke wegen eMudhra-Schlüsseln https://b3ncloud.net/article/44960 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116237 - Oray Pugongying X5 Pro Dnsmasq crlf injection https://b3ncloud.net/article/44961 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115948 - WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability https://b3ncloud.net/article/44946 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Brotli-Decoder-Lücke nicht nur in Node.js, sondern auch in Bun, Python und mehr https://b3ncloud.net/article/44947 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 7 unbequeme Wahrheiten über Netzwerksicherheit https://b3ncloud.net/article/44948 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts https://b3ncloud.net/article/44949 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts https://b3ncloud.net/article/44936 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 OpenSSL 4.1.0 Released With DTLS 1.3 and Post-Quantum Security Improvements https://b3ncloud.net/article/44937 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell security flaws now sucessfully exploited in the wild https://b3ncloud.net/article/44950 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-82944 - Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers https://b3ncloud.net/article/44953 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116235 - Oray Pugongying X5 Pro L2TP Authentication crlf injection https://b3ncloud.net/article/44952 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116236 - Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload https://b3ncloud.net/article/44951 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-70388 - Memory Corruption via Integer Underflow in Message Length Validation https://b3ncloud.net/article/44956 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111841 - WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/44955 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116233 - Oray Pugongying X5 Pro Dnsmasq crlf injection https://b3ncloud.net/article/44954 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116234 - Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection https://b3ncloud.net/article/44938 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Ransomware und KI-Phishing setzen den Mittelstand unter Druck https://b3ncloud.net/article/44939 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-114625: Kritische Lücke in VeloCloud Orchestrator on-prem ermöglicht Rechteausweitung https://b3ncloud.net/article/44940 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations https://b3ncloud.net/article/44921 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 TrendAI-Studie: So nutzen China, Russland, Nordkorea und Iran KI für Cyberangriffe https://b3ncloud.net/article/44925 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Unitree Go2: Kritische Schwachstelle bis Version 1.1.11.4 erlaubt Befehlsausführung https://b3ncloud.net/article/44957 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116232 - Oray Pugongying X5 Pro SNMP snmp_set crlf injection https://b3ncloud.net/article/44926 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell: Die Schonfrist ist vorbei https://b3ncloud.net/article/44927 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-19677: Kritische Lücke in frevvo 11.0.14 ermöglicht Admin-Rechte und Systembefehle https://b3ncloud.net/article/44928 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Anthropic reveals how Claude Mythos 5 crossed security testing boundaries https://b3ncloud.net/article/44929 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Myra AI Workspace soll KI-Nutzung in Unternehmen absichern https://b3ncloud.net/article/44930 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 NoMachine: Kritische RCE-Lücke CVE-2026-114549 ohne Anmeldung ausnutzbar https://b3ncloud.net/article/44962 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Veeam: Das Backup muss wissen, was ein KI-Agent getan hat https://b3ncloud.net/article/44941 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs https://b3ncloud.net/article/44931 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Angriffe auf Arista VeloCloud und Collabora/Nextcloud beobachtet https://b3ncloud.net/article/44932 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-107900 - Fuji Electric V-SFT Out-of-Bounds Read Vulnerability https://b3ncloud.net/article/44934 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-107894 - FUJI ELECTRIC V-SFT Stack-Based Buffer Overflow https://b3ncloud.net/article/44933 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-107897 - Fuji Electric V-SFT Out-of-Bounds Read Vulnerability https://b3ncloud.net/article/44922 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Cyberbedrohungen in der EU: geteilte Werkzeuge, andere Ziele https://b3ncloud.net/article/44923 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow https://b3ncloud.net/article/44924 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions https://b3ncloud.net/article/44917 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 India’s Film Sensor Board Data Breach – Unreleased Scripts, 500+ Film Titles Exposed https://b3ncloud.net/article/44935 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware https://b3ncloud.net/article/44918 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Böswillige Admins können in Fortinet-Produkten beliebige Dateien löschen https://b3ncloud.net/article/44919 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-113345 - Electronic delivery item Inspection Support System Improper File Access Control Vulnerability https://b3ncloud.net/article/44920 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116116 - Yoosee GM8135S Camera Secure Boot signature verification https://b3ncloud.net/article/44916 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Hacker Exploits Critical PHP2Shell Flaws to Win $2,000 Bitcoin Challenge, Releases PoC https://b3ncloud.net/article/44914 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2025-24154 https://b3ncloud.net/article/44913 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-114509 https://b3ncloud.net/article/44915 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5 https://b3ncloud.net/article/44911 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers https://b3ncloud.net/article/44912 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking https://b3ncloud.net/article/44909 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-24250: Codeausführung über YAML in NVIDIA Megatron Bridge https://b3ncloud.net/article/44910 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CGM CLININET: Vier kritische Schwachstellen ermöglichen Root-Codeausführung https://b3ncloud.net/article/44897 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116200 - Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() https://b3ncloud.net/article/44899 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116191 - Rclone before 1.75.2 Path Traversal via serve webdav MKCOL https://b3ncloud.net/article/44898 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116192 - rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots https://b3ncloud.net/article/44900 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116183 - phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID https://b3ncloud.net/article/44904 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116177 - vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass https://b3ncloud.net/article/44903 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116178 - vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders https://b3ncloud.net/article/44902 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116179 - vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override https://b3ncloud.net/article/44901 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116180 - vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors https://b3ncloud.net/article/44907 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116171 - SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix https://b3ncloud.net/article/44906 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116172 - vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n https://b3ncloud.net/article/44905 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116174 - vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate https://b3ncloud.net/article/44908 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116163 - Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses https://b3ncloud.net/article/44886 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device https://b3ncloud.net/article/44882 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120 https://b3ncloud.net/article/44883 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-83938: Kritische Azure-Kubernetes-Schwachstelle erlaubt Rechteausweitung ohne Anmeldung https://b3ncloud.net/article/44888 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116208 - YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts https://b3ncloud.net/article/44887 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116211 - YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create https://b3ncloud.net/article/44889 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116207 - YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API https://b3ncloud.net/article/44890 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116204 - YesWiki before 4.7.0 CSRF via despam Admin Action https://b3ncloud.net/article/44891 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116201 - Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition https://b3ncloud.net/article/44892 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116199 - Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback https://b3ncloud.net/article/44893 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116176 - vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector https://b3ncloud.net/article/44894 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116165 - Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletion on MongoDB https://b3ncloud.net/article/44895 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116149 - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images https://b3ncloud.net/article/44884 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 LiteLLM: Kritische Schwachstelle CVE-2026-114612 ermöglicht Admin-Übernahme https://b3ncloud.net/article/44885 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Microsoft Teams erhält KI-Erkennung für Phishing-Nachrichten ab November 2026 https://b3ncloud.net/article/44879 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION https://b3ncloud.net/article/44896 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116071 - rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption https://b3ncloud.net/article/44880 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116068 - Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router https://b3ncloud.net/article/44881 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-116067 - Paisa before 0.7.8 Path Traversal via Editor and Sheet API https://b3ncloud.net/article/44877 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Cyberagentur: Software-Schwachstellen bleiben länger ein Problem https://b3ncloud.net/article/44878 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Okta Access Gateway: Kritische Lücke in Admin-Konsole ermöglicht Befehlsausführung https://b3ncloud.net/article/44875 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 OpenJDK unter Druck: 53 neue Sicherheitslücken markieren historischen Höchststand https://b3ncloud.net/article/44876 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 Microsoft Teams to Use AI for Detecting Phishing Attacks Using Teams Conversations https://b3ncloud.net/article/45126 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 DSA-6584-1 varnish - security update https://b3ncloud.net/article/45125 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 DSA-6585-1 thunderbird - security update https://b3ncloud.net/article/44874 2026-10-25 weekly 0.7 B3ncloud.net de 2026-10-25 CVE-2026-115995 - Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection https://b3ncloud.net/article/44872 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-114820 - Vulnerability in the Oracle Java SE, Oracle GraalV https://b3ncloud.net/article/44873 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Pierluigi Paganini answers questions about the PHP2Shell flaws https://b3ncloud.net/article/44871 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/44866 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Cisco warnt vor kompromittierten eMudhra-Zertifizierungsstellen: Diese Produkte sind betroffen https://b3ncloud.net/article/44867 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Arista VeloCloud Orchestrator: Authentifizierte SQL-Injection kann Privilegien erweitern https://b3ncloud.net/article/44869 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-115557 - Distrust compromised intermediate certificates in ssl module https://b3ncloud.net/article/44868 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-115933 - Forged signed tokens let any registered user take over other users and organizations https://b3ncloud.net/article/44863 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot https://b3ncloud.net/article/44856 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Phishing erkennen und vermeiden: Die wichtigsten Warnsignale und Schutzmaßnahmen https://b3ncloud.net/article/44864 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-115932 - Path traversal in post media lets any registered user read server files https://b3ncloud.net/article/44865 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-116011 - Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load() https://b3ncloud.net/article/44857 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 The PHP Meltdown Shows How AI Makes Bugs More Exploitable https://b3ncloud.net/article/44858 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-116019 - Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives https://b3ncloud.net/article/44859 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-116014 - open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType https://b3ncloud.net/article/44860 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-116009 - Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action https://b3ncloud.net/article/44861 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-110018 - aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute https://b3ncloud.net/article/44852 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-111943 https://b3ncloud.net/article/44862 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline https://b3ncloud.net/article/45055 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads https://b3ncloud.net/article/44853 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Capcom Data Breach Exposes 11.7 Million Email Addresses https://b3ncloud.net/article/44854 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet https://b3ncloud.net/article/44855 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software https://b3ncloud.net/article/44851 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/44846 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-114196 - WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability https://b3ncloud.net/article/44848 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-94075 - WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/44847 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-112866 - WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability https://b3ncloud.net/article/44849 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-111402 - WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability https://b3ncloud.net/article/44843 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Anthropic’s Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers https://b3ncloud.net/article/44844 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products https://b3ncloud.net/article/44845 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud https://b3ncloud.net/article/44870 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-110956 - asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validation https://b3ncloud.net/article/44841 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests https://b3ncloud.net/article/44842 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-115806 - Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace https://b3ncloud.net/article/44840 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 Sicherheitslücken PHP2Shell: Risiko, Sicherheitslage, Folgen https://b3ncloud.net/article/44835 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-110264 https://b3ncloud.net/article/44850 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 DSA-6583-1 libheif - security update https://b3ncloud.net/article/44836 2026-10-24 weekly 0.7 B3ncloud.net de 2026-10-24 CVE-2026-115931 - Arbitrary file read and backend crash through unrestricted provider method calls https://b3ncloud.net/article/44827 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115938 - Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE https://b3ncloud.net/article/44828 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115937 - Unauthenticated payment reuse allows unpaid orders to be marked as paid https://b3ncloud.net/article/44829 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115935 - Control panel only API response emulation replaces "securityKey" and reaches server RCE https://b3ncloud.net/article/44830 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115895 - Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution https://b3ncloud.net/article/44831 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115893 - Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction https://b3ncloud.net/article/44832 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115889 - Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation https://b3ncloud.net/article/44833 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-58202 - OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation` https://b3ncloud.net/article/44834 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115775 - Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree https://b3ncloud.net/article/44823 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Abandoned Popcorn Time app exposed millions of device to RCE attacks https://b3ncloud.net/article/44824 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-79982 - Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size https://b3ncloud.net/article/44825 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-79977 - WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr https://b3ncloud.net/article/44826 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-91093 - HP One Agent Software – Security Update https://b3ncloud.net/article/44816 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Microsoft Teams to get AI-powered, context-aware phishing detection https://b3ncloud.net/article/44817 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations https://b3ncloud.net/article/44822 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches https://b3ncloud.net/article/44818 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws https://b3ncloud.net/article/44819 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions https://b3ncloud.net/article/44820 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115812 - Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server https://b3ncloud.net/article/44821 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-87901 - Product Registration Module Reflected Cross-Site Scripting https://b3ncloud.net/article/44815 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Microsoft: Windows Server 2016 reaches end of support in January https://b3ncloud.net/article/44799 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 PHP shares mitigation for new RCE vulnerability with no patch https://b3ncloud.net/article/44800 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands https://b3ncloud.net/article/44803 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-58497 - Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests https://b3ncloud.net/article/44804 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-55486 - Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS https://b3ncloud.net/article/44806 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-53942 - Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN https://b3ncloud.net/article/44805 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-54668 - Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config) https://b3ncloud.net/article/44808 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-46651 - Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer https://b3ncloud.net/article/44807 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-46652 - Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer https://b3ncloud.net/article/44809 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-102786 - Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5 https://b3ncloud.net/article/44810 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-57845 - Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder https://b3ncloud.net/article/44801 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices https://b3ncloud.net/article/44802 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware https://b3ncloud.net/article/44766 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea https://b3ncloud.net/article/44811 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-55826 - Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin https://b3ncloud.net/article/44812 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-50053 - Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters https://b3ncloud.net/article/44813 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115481 - baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload https://b3ncloud.net/article/44760 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Forescout deckt neue ClickFix-Angriffsketten und Malware-Plattform ROMULUS auf https://b3ncloud.net/article/44814 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-10632 - Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter https://b3ncloud.net/article/44767 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data https://b3ncloud.net/article/44768 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 You gave your AI agent access, but who is giving it orders? https://b3ncloud.net/article/44769 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Schluss mit abstrakten Versprechen, her mit klaren Handlungsimpulsen https://b3ncloud.net/article/44770 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access https://b3ncloud.net/article/44771 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials https://b3ncloud.net/article/44772 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs https://b3ncloud.net/article/44773 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-114621 - baserCMS: SQL injection in the admin panel and admin API https://b3ncloud.net/article/44774 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-114357 - DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) https://b3ncloud.net/article/44775 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-114355 - DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root https://b3ncloud.net/article/44776 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-114354 - DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root https://b3ncloud.net/article/44777 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-93639 - Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation https://b3ncloud.net/article/44778 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-63120 - PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write https://b3ncloud.net/article/44780 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-57121 - PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API https://b3ncloud.net/article/44779 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-57144 - PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable https://b3ncloud.net/article/44785 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-55888 - XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal https://b3ncloud.net/article/44784 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-55889 - XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key https://b3ncloud.net/article/44783 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-57113 - PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion https://b3ncloud.net/article/44782 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-57116 - PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation https://b3ncloud.net/article/44781 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-57117 - PraisonAI: Compute-bridged file tools allow shell command injection https://b3ncloud.net/article/44787 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115728 - @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing https://b3ncloud.net/article/44786 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115729 - @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass https://b3ncloud.net/article/44793 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112854 - WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability https://b3ncloud.net/article/44792 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112855 - WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability https://b3ncloud.net/article/44791 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112856 - WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability https://b3ncloud.net/article/44790 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112857 - WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability https://b3ncloud.net/article/44789 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112858 - WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability https://b3ncloud.net/article/44788 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112859 - WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability https://b3ncloud.net/article/44796 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112851 - WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability https://b3ncloud.net/article/44795 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112852 - WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability https://b3ncloud.net/article/44794 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112853 - WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/44797 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Resident Evil maker Capcom warns of phishing after 11.7 million records exposed https://b3ncloud.net/article/44761 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 HPE patches eight max severity RCE and auth bypass AOS flaws https://b3ncloud.net/article/44762 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge https://b3ncloud.net/article/44734 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Qualys Update und erste Untersuchungen zu PHP2Shell in Zahlen https://b3ncloud.net/article/44763 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-112904 - Vvveb: Path Traversal in nextRestore() and nextBackup() https://b3ncloud.net/article/44839 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal https://b3ncloud.net/article/44764 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-115727 - AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server https://b3ncloud.net/article/44753 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 AfD-Leak: Mutmaßliche Täter bekennen sich https://b3ncloud.net/article/44754 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches https://b3ncloud.net/article/44755 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems https://b3ncloud.net/article/44756 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack https://b3ncloud.net/article/44765 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 CVE-2026-107685 - WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers https://b3ncloud.net/article/44757 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet https://b3ncloud.net/article/44735 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Oracle Java SE and GraalVM, und OpenJDK: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen https://b3ncloud.net/article/44736 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 China APT Uses AI Pentest Tool Artex in ConnectWise Attacks https://b3ncloud.net/article/44737 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 ksmbd öffnet Linux-Dateiserver für Angreifer https://b3ncloud.net/article/44738 2026-10-23 weekly 0.7 B3ncloud.net de 2026-10-23 Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months