https://b3ncloud.net/ daily 1.0 2026-10-28 https://b3ncloud.net/news hourly 0.9 2026-10-28 https://b3ncloud.net/tools monthly 0.8 2026-10-28 https://b3ncloud.net/tools/ip-lookup monthly 0.7 2026-10-28 https://b3ncloud.net/tools/dns-lookup monthly 0.7 2026-10-28 https://b3ncloud.net/tools/ip-info monthly 0.7 2026-10-28 https://b3ncloud.net/tools/url-parser monthly 0.6 2026-10-28 https://b3ncloud.net/tools/http-status-codes monthly 0.6 2026-10-28 https://b3ncloud.net/tools/common-ports monthly 0.6 2026-10-28 https://b3ncloud.net/tools/ip-range-calculator monthly 0.6 2026-10-28 https://b3ncloud.net/tools/dns-leak-test monthly 0.7 2026-10-28 https://b3ncloud.net/search daily 0.7 2026-10-28 https://b3ncloud.net/breach-check monthly 0.7 2026-10-28 https://b3ncloud.net/leak-monitor monthly 0.7 2026-10-28 https://b3ncloud.net/phishing-check monthly 0.7 2026-10-28 https://b3ncloud.net/ioc monthly 0.7 2026-10-28 https://b3ncloud.net/ssl monthly 0.7 2026-10-28 https://b3ncloud.net/header monthly 0.7 2026-10-28 https://b3ncloud.net/cve-search weekly 0.8 2026-10-28 https://b3ncloud.net/vulnerability-check weekly 0.7 2026-10-28 https://b3ncloud.net/mitre weekly 0.7 2026-10-28 https://b3ncloud.net/intel daily 0.8 2026-10-28 https://b3ncloud.net/cheatsheets monthly 0.7 2026-10-28 https://b3ncloud.net/dkb weekly 0.7 2026-10-28 https://b3ncloud.net/security-checklist monthly 0.6 2026-10-28 https://b3ncloud.net/incident-response monthly 0.6 2026-10-28 https://b3ncloud.net/firewall-rules monthly 0.6 2026-10-28 https://b3ncloud.net/regex monthly 0.6 2026-10-28 https://b3ncloud.net/cron monthly 0.6 2026-10-28 https://b3ncloud.net/log-analyzer monthly 0.6 2026-10-28 https://b3ncloud.net/subnet monthly 0.6 2026-10-28 https://b3ncloud.net/troubleshooting monthly 0.6 2026-10-28 https://b3ncloud.net/darknet weekly 0.7 2026-10-28 https://b3ncloud.net/stats daily 0.7 2026-10-28 https://b3ncloud.net/updates weekly 0.5 2026-10-28 https://b3ncloud.net/updates/feed.xml hourly 0.6 2026-10-28 https://b3ncloud.net/feed.xml hourly 0.6 2026-10-28 https://b3ncloud.net/cves/feed.xml hourly 0.6 2026-10-28 https://b3ncloud.net/impressum yearly 0.2 2026-10-28 https://b3ncloud.net/datenschutz yearly 0.2 2026-10-28 https://b3ncloud.net/article/45417 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw https://b3ncloud.net/article/45418 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail https://b3ncloud.net/article/45419 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-117574 - Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization https://b3ncloud.net/article/45420 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-61542 - Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools https://b3ncloud.net/article/45421 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-63190 - FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS https://b3ncloud.net/article/45422 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-78674 - Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution https://b3ncloud.net/article/45423 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2025-14260 - Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources https://b3ncloud.net/article/45424 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-109411 - Samba: access control bypass via vfs_ceph_rgw case-insensitive open https://b3ncloud.net/article/45429 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118683 - MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf https://b3ncloud.net/article/45428 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118684 - MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads https://b3ncloud.net/article/45427 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118686 - EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex https://b3ncloud.net/article/45426 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118687 - Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication https://b3ncloud.net/article/45425 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118688 - Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename https://b3ncloud.net/article/45431 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118648 - n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy https://b3ncloud.net/article/45430 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118649 - n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables https://b3ncloud.net/article/45434 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118643 - n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data https://b3ncloud.net/article/45433 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118645 - n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter https://b3ncloud.net/article/45432 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118647 - n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data https://b3ncloud.net/article/45436 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118264 - Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls https://b3ncloud.net/article/45435 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118633 - Sophos UTM Path Traversal Remote Code Execution https://b3ncloud.net/article/45439 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118260 - Echo: BodyDump captures request and response bodies without size limits in v4 https://b3ncloud.net/article/45438 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118261 - Echo: Decompress permits unbounded gzip expansion in v4 https://b3ncloud.net/article/45437 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118262 - Echo: WebSocket proxy can retain connections and handlers after client disconnect https://b3ncloud.net/article/45443 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118252 - Highcharts Dashboards: sidebar component labels are parsed as HTML https://b3ncloud.net/article/45442 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118253 - Highcharts Dashboards: fullscreen labels are parsed as HTML https://b3ncloud.net/article/45441 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118254 - Highcharts Grid: pagination language options are parsed as HTML https://b3ncloud.net/article/45440 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118255 - Highcharts Grid: javascript: URL in credits.href runs script on click https://b3ncloud.net/article/45398 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns https://b3ncloud.net/article/45392 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery https://b3ncloud.net/article/45399 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-84725 - Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap https://b3ncloud.net/article/45393 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Sieben kritische Fireware-OS-Lücken in WatchGuard Firebox: mehrere RCE-Risiken mit CVSS bis 9,5 https://b3ncloud.net/article/45400 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118619 - Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability https://b3ncloud.net/article/45401 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118610 - Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability https://b3ncloud.net/article/45403 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118605 - Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability https://b3ncloud.net/article/45402 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118606 - Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability https://b3ncloud.net/article/45404 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118510 - Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs https://b3ncloud.net/article/45394 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Adobe Campaign Classic und Adobe Connect: Kritische CVEs bis CVSS 10.0 gemeldet https://b3ncloud.net/article/45405 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-106079 - Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration https://b3ncloud.net/article/45406 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103506 - SSO settings authorization bypass https://b3ncloud.net/article/45407 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103409 - Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed https://b3ncloud.net/article/45409 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103407 - Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management https://b3ncloud.net/article/45408 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103408 - Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options https://b3ncloud.net/article/45410 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103406 - Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. https://b3ncloud.net/article/45413 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103401 - Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root https://b3ncloud.net/article/45412 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103402 - Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation https://b3ncloud.net/article/45411 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103403 - Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules https://b3ncloud.net/article/45395 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS https://b3ncloud.net/article/45416 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. https://b3ncloud.net/article/45380 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Sony ISP subsidiary data breach exposes 2.5 million customer records https://b3ncloud.net/article/45396 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win https://b3ncloud.net/article/45414 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-44179 - XWiki Pro Macros: excerpt-include title and content injection executes code https://b3ncloud.net/article/45415 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-112357 - GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation https://b3ncloud.net/article/45381 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions https://b3ncloud.net/article/45382 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network https://b3ncloud.net/article/45383 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Volt Typhoon hides zero-day attacks using 'Silent Train' framework https://b3ncloud.net/article/45384 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions https://b3ncloud.net/article/45385 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116778 - FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution https://b3ncloud.net/article/45370 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript https://b3ncloud.net/article/45386 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-59979 - YosemiteCrew: Missing organization authorization on service and PMS library/template routes https://b3ncloud.net/article/45371 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 PropellerAds: Why Modern Malware Delivery Starts Before the Payload https://b3ncloud.net/article/45372 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test https://b3ncloud.net/article/45373 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Defenders need more time to patch with the influx of patching hitting operations https://b3ncloud.net/article/45374 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Offengelegte Zugangsdaten bleiben jahrelang nutzbar https://b3ncloud.net/article/45375 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 HiRDB: Sechs kritische Schwachstellen erlauben Angriffe ohne Anmeldung https://b3ncloud.net/article/45376 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-65145: Kritische Lücke in NVIDIA NeMo Agent Toolkit ermöglicht Angriffe ohne Anmeldung https://b3ncloud.net/article/45377 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft urges Entra ID admins to migrate users to passkeys https://b3ncloud.net/article/45378 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users https://b3ncloud.net/article/45352 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115968 - WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/45351 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115603 - WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability https://b3ncloud.net/article/45353 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116389 - WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability https://b3ncloud.net/article/45354 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 InfraTrust report warns of exploited flaws in critical network infrastructure https://b3ncloud.net/article/45355 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Even after PHP2Shell, blast radius matters more than a CVSS score https://b3ncloud.net/article/45356 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities https://b3ncloud.net/article/45357 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime https://b3ncloud.net/article/45358 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Chrome and Firefox Updates Patch Over 200 Vulnerabilities https://b3ncloud.net/article/45359 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116078 - HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit https://b3ncloud.net/article/45397 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Lapsed US snooping law still running as senators object https://b3ncloud.net/article/45360 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-105420 - Path Traversal in Wing WFTP Server leading to Remote Code Execution https://b3ncloud.net/article/45361 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-67074 - HCL BigFix AEX is affected by multiple security vulnerabilities. https://b3ncloud.net/article/45363 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115904 - Topluyo Desktop for Linux has an OS Command Injection issue https://b3ncloud.net/article/45362 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-116391 - WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability https://b3ncloud.net/article/45366 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-111411 - WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability https://b3ncloud.net/article/45365 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-111850 - WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability https://b3ncloud.net/article/45364 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-115607 - WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability https://b3ncloud.net/article/45337 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-108142 https://b3ncloud.net/article/45367 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-93517 - X.Org Server GLX RenderLarge Heap Buffer Overflow https://b3ncloud.net/article/45338 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft Authenticator: Bösartige Apps konnten Zugangstoken abgreifen https://b3ncloud.net/article/45339 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Use Fake Court Notices to Deliver XWorm Malware Through Hidden Windows Scripts https://b3ncloud.net/article/45368 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch https://b3ncloud.net/article/45340 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Claude AI Builds One-Click Chrome and 0-Click Linux Exploit Chains, Bypasses Android Lock Screen https://b3ncloud.net/article/45341 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers now scanning systems for recently-patched Oracle flaw https://b3ncloud.net/article/45328 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 China-Linked Hackers Exploit PHP2Shell to Root Firewalls https://b3ncloud.net/article/45342 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-102790 - Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 https://b3ncloud.net/article/45343 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-114278 - Unauthenticated Command Injection via kubeconfig Username in che-machine-exec https://b3ncloud.net/article/45369 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers https://b3ncloud.net/article/45329 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Tailscale SSH: „Tailworm“-Lücke führt zu Root-Rechten und Kompromittierung https://b3ncloud.net/article/45330 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability https://b3ncloud.net/article/45379 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Wazuh and AI for Enhanced SOC Workflows https://b3ncloud.net/article/45344 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118485 - Axel Download Accelerator Path Traversal via URL Filename Decoding https://b3ncloud.net/article/45345 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86378 - Dell PowerProtect Data Domain Stack-based Buffer Overflow Vulnerability https://b3ncloud.net/article/45347 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-112197 - Missing Authentication for Critical Function in Tactis' NoviGest Desktop App https://b3ncloud.net/article/45346 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-112198 - Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App https://b3ncloud.net/article/45349 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103792 - Dell PowerProtect Data Domain Management Center SQL Injection Vulnerability https://b3ncloud.net/article/45348 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-103799 - Dell PowerProtect Data Domain Management Center Missing Authorization Vulnerability https://b3ncloud.net/article/45331 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers https://b3ncloud.net/article/45332 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass https://b3ncloud.net/article/45333 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Chrome and Firefox updates fix serious security flaws. Install them now https://b3ncloud.net/article/45350 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118477 - KaliFast Project Management Platform ei_git_repo_url OS Command Injection https://b3ncloud.net/article/45313 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Compromise Camera Management Software to Deploy Malware on Windows Computers https://b3ncloud.net/article/45314 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Long-Hidden Flaws Patched in EPICS Research Facility Control Software https://b3ncloud.net/article/45315 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CISA warns of hackers now exploiting critical Node2Shell flaw https://b3ncloud.net/article/45316 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Actively Exploiting New Oracle EBS RCE Vulnerability https://b3ncloud.net/article/45334 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed https://b3ncloud.net/article/45317 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 FortiBleed 2.0 Reveals Thousands of Fortinet VPN and Active Directory Credentials in Exposed Configurations https://b3ncloud.net/article/45318 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/45319 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Wenn KI zur Nutzergruppe wird https://b3ncloud.net/article/45320 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 eMudhra-TLS-Leck: Apple lässt Problem auf macOS-Kommandozeile zunächst bestehen https://b3ncloud.net/article/45321 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86384 - Dell PowerProtect Data Domain Use of Hard-coded Cryptographic Key Vulnerability https://b3ncloud.net/article/45304 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft Releases Emergency Windows Updates to Block Compromised eMudhra Certificates https://b3ncloud.net/article/45305 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Use CyberStrikeAI Agents to Automate Network Scanning, Exploitation, and Data Theft https://b3ncloud.net/article/45322 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86385 - Dell PowerProtect Data Domain Improper Privilege Management Vulnerability https://b3ncloud.net/article/45306 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Nefilim and Hive ransomware affiliate gets 70 months in prison https://b3ncloud.net/article/45335 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History https://b3ncloud.net/article/45307 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks https://b3ncloud.net/article/45308 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Angreifer können Veeam-Backup-Server manipulieren und MFA deaktivieren https://b3ncloud.net/article/45324 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86400 - Dell PowerProtect Data Domain Improper Authentication Vulnerability https://b3ncloud.net/article/45323 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-90717 - Dell PowerProtect Data Domain Management Center Authentication Bypass Vulnerability https://b3ncloud.net/article/45326 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86396 - Dell PowerProtect Data Domain OS Command Injection Vulnerability https://b3ncloud.net/article/45325 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-86398 - Dell PowerProtect Data Domain Path Traversal Vulnerability https://b3ncloud.net/article/45309 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-18450: Kritische IPMI-Schwachstelle im BMC erlaubt Befehlsausführung https://b3ncloud.net/article/45327 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-14571 - SQL injection (SQLi) in the user authentication module of Futurum Software https://b3ncloud.net/article/45310 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Start Probing Fresh Oracle EBS Vulnerability https://b3ncloud.net/article/45311 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Hijack Government and School Subdomains to Promote Illegal Gambling Websites https://b3ncloud.net/article/45312 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Kritische JP1-Schwachstellen: Zwölf CVEs treffen Jobsteuerung und Basisdienste https://b3ncloud.net/article/45293 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts https://b3ncloud.net/article/45294 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Three Japan-Focused Cyberattacks Show How Hackers Use AI https://b3ncloud.net/article/45295 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 REDAXO: Kritische Authentifizierungsumgehung in Core vor 5.21.4 ermöglicht Admin-Zugriff https://b3ncloud.net/article/45296 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits https://b3ncloud.net/article/45297 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Top 10 Best Ransomware Recovery Solutions in 2026 [Ranked & Scored] https://b3ncloud.net/article/45298 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-48356: Adobe Commerce und Magento mit aktiv ausgenutzter kritischer Schwachstelle https://b3ncloud.net/article/45299 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Angreifer nehmen Brotli-, Adobe-Commerce- und Magento-Lecks ins Visier https://b3ncloud.net/article/45336 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 „Passwort“ Folge 69: Die Hütte brennt https://b3ncloud.net/article/45300 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-92797 - Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter https://b3ncloud.net/article/45287 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Sony Suffers Massive Data Breach- 2.58 Million So-net and Plala Users Data Exposed https://b3ncloud.net/article/45301 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-111120 - VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task https://b3ncloud.net/article/45303 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-109218 - Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass https://b3ncloud.net/article/45302 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-109384 - The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload https://b3ncloud.net/article/45288 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach https://b3ncloud.net/article/45289 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Neuer Information Stealer nutzt BYOVD https://b3ncloud.net/article/45280 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Target U.S. Election Commission, Forcing Online System Shutdown Days Before Midterms https://b3ncloud.net/article/45290 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers https://b3ncloud.net/article/45291 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws https://b3ncloud.net/article/45281 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Siemens Software Center wird zum Einfallstor für Schadcode https://b3ncloud.net/article/45282 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users https://b3ncloud.net/article/45292 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges https://b3ncloud.net/article/45283 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Japan’s GMO Internet Urges Customers to Shut Down PCs After Hackers Threaten Ransomware Attack https://b3ncloud.net/article/45285 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-104383 - Code injection in EagleCloud Aquila on-premises version https://b3ncloud.net/article/45284 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-104384 - Insufficiently protected credentials in EagleCloud Aquila on-premises version https://b3ncloud.net/article/45268 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-1928 - Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution https://b3ncloud.net/article/45269 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-84999 - Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler https://b3ncloud.net/article/45272 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118375 - llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv() https://b3ncloud.net/article/45271 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118377 - mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacks https://b3ncloud.net/article/45270 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118378 - Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name https://b3ncloud.net/article/45274 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118370 - libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes https://b3ncloud.net/article/45273 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-118374 - LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response https://b3ncloud.net/article/45276 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-117607 - Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import https://b3ncloud.net/article/45275 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-117610 - libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser https://b3ncloud.net/article/45278 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2014-125138 - C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields https://b3ncloud.net/article/45277 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2015-20129 - CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/ https://b3ncloud.net/article/45279 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2013-20007 - Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi https://b3ncloud.net/article/45264 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Microsoft Whistleblower Alleges Foreign Engineer Was Approved to Access U.S. Government Cloud Logs https://b3ncloud.net/article/45265 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution https://b3ncloud.net/article/45266 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-106013 - Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter https://b3ncloud.net/article/45286 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 PHP2Shell im Überblick: Ein Erfolg, verkleidet als Desaster https://b3ncloud.net/article/45267 2026-10-28 weekly 0.7 B3ncloud.net de 2026-10-28 CVE-2026-110879 - jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512) https://b3ncloud.net/article/45258 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Japan's GMO urges customers to shut down PCs amid ransomware threat https://b3ncloud.net/article/45260 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-58256 - GRR vulnerable to Remote Code Execution Via PHP Code Injection https://b3ncloud.net/article/45262 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-58205 - GRR has a Reflected XSS issue https://b3ncloud.net/article/45261 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-58255 - Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401 https://b3ncloud.net/article/45259 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Starlink-Observation geht über Online-Werbung https://b3ncloud.net/article/45263 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-57191 - Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing https://b3ncloud.net/article/45253 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 UNM Health ransomware attack disrupts patient care, surgeries https://b3ncloud.net/article/45254 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-85898 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability https://b3ncloud.net/article/45256 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116692 - MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules https://b3ncloud.net/article/45255 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116693 - dd-trace: ReDOS in URL query string obfuscation https://b3ncloud.net/article/45387 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 USN-8956-2: Brotli vulnerability https://b3ncloud.net/article/45251 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112346: Kritische RCE in OpenHands Agent SDK vor Version 1.52.0 https://b3ncloud.net/article/45252 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers hijack Convertr analytics script to steal payment card data https://b3ncloud.net/article/45243 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112352 - Sunhillo SureLine Authentication Bypass via Session Cookie https://b3ncloud.net/article/45244 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112351 - Sunhillo SureLine OS Command Injection via networkDiag.cgi https://b3ncloud.net/article/45245 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112350 - Sunhillo SureLine Path Traversal via radarUpdater.cgi https://b3ncloud.net/article/45246 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116688 - CKEditor: Cross-site scripting (XSS) in the engine package https://b3ncloud.net/article/45247 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112355 - MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API https://b3ncloud.net/article/45248 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters https://b3ncloud.net/article/45218 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking https://b3ncloud.net/article/45219 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets https://b3ncloud.net/article/45220 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Microsoft releases Windows OOB updates to distrust eMudhra certificates https://b3ncloud.net/article/45249 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-57202 - Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes https://b3ncloud.net/article/45250 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116676 - Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan https://b3ncloud.net/article/45221 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116682 - FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory https://b3ncloud.net/article/45213 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts https://b3ncloud.net/article/45222 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102814 - Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 https://b3ncloud.net/article/45223 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108303 - Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. https://b3ncloud.net/article/45224 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108329 - Tanium addressed an unauthorized code execution vulnerability in Threat Response. https://b3ncloud.net/article/45214 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Before Your SOC Investigates: What 16K+ Security Teams Already Know https://b3ncloud.net/article/45216 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86990 https://b3ncloud.net/article/45215 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112697 https://b3ncloud.net/article/45225 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-48360 - Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) https://b3ncloud.net/article/45228 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-114598 - Access of resource using incompatible type ('type confusion') in EPICS Base https://b3ncloud.net/article/45227 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116672 - Authlib RFC 7592 examples omit registration-access-token client binding https://b3ncloud.net/article/45226 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116675 - TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization https://b3ncloud.net/article/45231 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112353 - GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment https://b3ncloud.net/article/45230 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-114596 - Integer overflow or wraparound in EPICS Base https://b3ncloud.net/article/45229 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-114597 - Improper handling of length parameter inconsistency in EPICS Base https://b3ncloud.net/article/45234 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108014 - eMudhra Compromised Certficate vulnerability impacts HCL Domino Server https://b3ncloud.net/article/45233 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108015 - eMudhra Compromised Certficate vulnerability impacts HCL Notes Client https://b3ncloud.net/article/45232 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-108142 - CDP Coordinator Service Authorization Bypass https://b3ncloud.net/article/45239 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-105780 - Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) https://b3ncloud.net/article/45238 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-105781 - Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) https://b3ncloud.net/article/45237 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-106076 - Veeam Backup for Microsoft 365 SQL Injection Vulnerability https://b3ncloud.net/article/45236 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-106077 - Veeam Backup for Microsoft 365 Arbitrary File Read Vulnerability https://b3ncloud.net/article/45235 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-107671 - Multi-Factor Authentication Bypass via Administrator Privilege Escalation https://b3ncloud.net/article/45241 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-104351 - Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) https://b3ncloud.net/article/45240 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-104353 - Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) https://b3ncloud.net/article/45217 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Critical GoAhead TLS Flaws Could Expose Hundreds of Millions of Devices to Attacks https://b3ncloud.net/article/45203 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Researchers Exploit OpenAI API Flaw to Extract Hidden GPT-5.6 Reasoning Traces https://b3ncloud.net/article/45204 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 USN-8957-1: authd vulnerability https://b3ncloud.net/article/45205 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-107672 - Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility https://b3ncloud.net/article/45206 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116863 - WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/45207 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-103594 - Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution https://b3ncloud.net/article/45185 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws https://b3ncloud.net/article/45186 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-93328: Kritische Lücke in Google Cloud MCP Toolbox ermöglicht Dateidiebstahl und Überschreiben lokaler Dateien https://b3ncloud.net/article/45187 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-115905: Kritische Rust-ZIP-Schwachstelle in zip bis 9.0.4 erlaubt Dateipfad-Manipulation https://b3ncloud.net/article/45208 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-111585 - Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow https://b3ncloud.net/article/45188 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112507 https://b3ncloud.net/article/45209 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117604 - Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback https://b3ncloud.net/article/45210 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-92372 - Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution https://b3ncloud.net/article/45189 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Weniger Angriffe, aber fast jede Malware ist ein Einzelstück https://b3ncloud.net/article/45178 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Use Fake FedEx Invoices to Deploy Sirius Backdoor and Evade Windows Security https://b3ncloud.net/article/45179 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-84496 https://b3ncloud.net/article/45211 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-118008 - Privilege escalation in the DOM: Navigation component https://b3ncloud.net/article/45191 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117602 - Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution https://b3ncloud.net/article/45190 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117603 - Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass https://b3ncloud.net/article/45194 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117569 - Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters https://b3ncloud.net/article/45193 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117573 - hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools https://b3ncloud.net/article/45192 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117601 - Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions https://b3ncloud.net/article/45197 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117560 - ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools https://b3ncloud.net/article/45196 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117561 - sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values https://b3ncloud.net/article/45195 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117564 - nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret https://b3ncloud.net/article/45199 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117558 - ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status https://b3ncloud.net/article/45198 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117559 - DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass https://b3ncloud.net/article/45242 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 PHP2Shell: US updates Kev catalogue as exploits spread https://b3ncloud.net/article/45180 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Tailscale warns of SSH flaws allowing root privilege escalation https://b3ncloud.net/article/45181 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Abuse Signed ChatGPT and Claude Binaries to Deploy Malware Through Fake GitHub Downloads https://b3ncloud.net/article/45182 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest https://b3ncloud.net/article/45257 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 OpenAI’s Altman: Only way out of patch apocalypse is through https://b3ncloud.net/article/45212 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads https://b3ncloud.net/article/45183 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court https://b3ncloud.net/article/45202 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65119 - NVIDIA TensorRT-LLM for any platform contains a vu https://b3ncloud.net/article/45201 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65145 - NVIDIA NeMo Agent Toolkit contains a vulnerability https://b3ncloud.net/article/45200 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65151 - NVIDIA NeMo Agent Toolkit contains vulnerability w https://b3ncloud.net/article/45184 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 HPE Patches Dozens of Critical Flaws in Networking Products https://b3ncloud.net/article/45157 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Dell BIOS: Mehrere Schwachstellen https://b3ncloud.net/article/45158 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Mozilla Firefox (iOS): Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen https://b3ncloud.net/article/45159 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple iOS, iPadOS, macOS und Safari: Mehrere Schwachstellen https://b3ncloud.net/article/45160 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 The web’s having a rough week. Here’s how to browse safely https://b3ncloud.net/article/45161 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens https://b3ncloud.net/article/45162 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-106087 - TRO600 contains an arbitrary file read vulnerabili https://b3ncloud.net/article/45153 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 https://b3ncloud.net/article/45163 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key https://b3ncloud.net/article/45154 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges https://b3ncloud.net/article/45164 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-115216 - Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials https://b3ncloud.net/article/45165 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 AI-Generated Fake Login Pages Are Making Account Takeovers Easier https://b3ncloud.net/article/45166 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption https://b3ncloud.net/article/45167 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112362 - @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets https://b3ncloud.net/article/45169 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117536 - REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation https://b3ncloud.net/article/45168 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117540 - svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop https://b3ncloud.net/article/45171 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117466 - Octopus Server Privilege Escalation Vulnerability https://b3ncloud.net/article/45170 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117532 - REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin https://b3ncloud.net/article/45172 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116878 - Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity https://b3ncloud.net/article/45175 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116870 - Octopus Server OIDC Token Issuer Validation Bypass https://b3ncloud.net/article/45174 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116871 - Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask https://b3ncloud.net/article/45173 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116872 - Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters https://b3ncloud.net/article/45155 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple iOS 27.2 Released With Fixes for 163 Vulnerabilities, Including Fix for Critical WebKit RCE https://b3ncloud.net/article/45176 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102800 - Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 https://b3ncloud.net/article/45177 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-4337 - Unrestricted Upload of File in PuMuKIT application https://b3ncloud.net/article/45156 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Wenn der legitime Login zum Angriffspfad wird https://b3ncloud.net/article/45116 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Exeon AgentGuard: Sicherheitslösung erkennt Schatten-KI, Datenlecks und riskantes Agentenverhalten https://b3ncloud.net/article/45127 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys https://b3ncloud.net/article/45128 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/45129 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple backports CoreGraphics zero-day patches to older iPhones https://b3ncloud.net/article/45130 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 This is Fine: What NetScaler Zero-Days Tell Us About the New Normal https://b3ncloud.net/article/45117 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP https://b3ncloud.net/article/45118 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover https://b3ncloud.net/article/45131 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones https://b3ncloud.net/article/45107 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Check Point startet Firewall-as-a-Subscription mit KI-Schutz und flexiblem Abonnement https://b3ncloud.net/article/45132 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82117 - Authentication Bypass by Spoofing Vulnerability in HiRDB https://b3ncloud.net/article/45133 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82116 - Missing Authentication for Critical Function Vulnerability in HiRDB https://b3ncloud.net/article/45134 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82118 - Stack-based Buffer Overflow Vulnerability in HiRDB https://b3ncloud.net/article/45135 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82120 - Heap-based Buffer Overflow Vulnerability in HiRDB https://b3ncloud.net/article/45136 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82119 - OS Command Injection Vulnerability in HiRDB https://b3ncloud.net/article/45137 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-82122 - Stack-based Buffer Overflow Vulnerability in HiRDB https://b3ncloud.net/article/45138 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-76939 - Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 https://b3ncloud.net/article/45139 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-76936 - Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 https://b3ncloud.net/article/45140 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-76938 - Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 https://b3ncloud.net/article/45141 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86577 - Out-of-bounds Write Vulnerability in JP1 Products https://b3ncloud.net/article/45142 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86576 - Heap-based Buffer Overflow Vulnerability in JP1 Products https://b3ncloud.net/article/45143 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-86574 - Heap-based Buffer Overflow Vulnerability in JP1/Base https://b3ncloud.net/article/45119 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers https://b3ncloud.net/article/45144 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102788 - Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 https://b3ncloud.net/article/45120 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Energy giant ENGIE discloses data breach affecting customers https://b3ncloud.net/article/45145 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-102789 - Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 https://b3ncloud.net/article/45146 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-117494 - Multiple vulnerabilities in Sisense’s Cloud BI Platform https://b3ncloud.net/article/45147 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-92885 - Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login https://b3ncloud.net/article/45148 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records https://b3ncloud.net/article/45121 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-115727: Kritische RCE-Lücke in AgenticSeek vor Commit 409840c https://b3ncloud.net/article/45122 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-107092: Kritische Directory-Traversal-Lücke in NexoPOS 6.2.4 https://b3ncloud.net/article/45149 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-85299 - Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration https://b3ncloud.net/article/45150 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers https://b3ncloud.net/article/45108 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DreamHost Forces Email and FTP Password Resets Following Unexplained Security Incident https://b3ncloud.net/article/45109 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CISA confirms PHP2Shell vulnerabilities now exploited in attacks https://b3ncloud.net/article/45110 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Top 10 Best Confidential Computing Platforms in 2026 [Ranked & Scored] https://b3ncloud.net/article/45111 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-65220 - Supermicro BMC IPMI feature contains a Privilege escalation vulnerability https://b3ncloud.net/article/45112 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 php2shell: Erfolgreiche Angriffe auf PHP-Schwachstelle bestätigt https://b3ncloud.net/article/45123 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 KI unter Kontrolle https://b3ncloud.net/article/45113 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Infect 953 Online Stores With Malicious JavaScript That Evades Security Scanners https://b3ncloud.net/article/45114 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-18450 - Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability https://b3ncloud.net/article/45102 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Impersonate IT Support on Microsoft Teams to Gain Remote Access to Employees’ PCs https://b3ncloud.net/article/45103 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-113946 https://b3ncloud.net/article/45115 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-75891 - Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint https://b3ncloud.net/article/45104 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems https://b3ncloud.net/article/45151 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 AfD - 345,439 breached accounts https://b3ncloud.net/article/45105 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Hijack Microsoft 365 Accounts at 79 Organizations Using Stolen Login Tokens https://b3ncloud.net/article/45152 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 AI World: AI vulnerability surge brings change for Oracle’s cyber practice https://b3ncloud.net/article/45106 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses https://b3ncloud.net/article/45097 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112622 https://b3ncloud.net/article/45096 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112457 https://b3ncloud.net/article/45098 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Use AI Agents to Target Over 2,250 Microsoft 365 Tenants Through ConnectWise https://b3ncloud.net/article/45099 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Kritische Atlassian-Schwachstelle mit unklarer Kennung https://b3ncloud.net/article/45100 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 OpenAI Codex Breaks USB Encryption in Minutes, Exposing Hardcoded Keys and Security Flaws https://b3ncloud.net/article/45093 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking https://b3ncloud.net/article/45094 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Abuse Claude’s Official Website and Google Ads to Spread Malware https://b3ncloud.net/article/45101 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution https://b3ncloud.net/article/45089 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials https://b3ncloud.net/article/45090 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users https://b3ncloud.net/article/45091 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone https://b3ncloud.net/article/45092 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-84498 https://b3ncloud.net/article/45075 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Apache Camel Fixes Multiple Vulnerabilities Including High-Severity XXE One’s https://b3ncloud.net/article/45076 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 New DarkCore RAT Targets Gmail and WhatsApp Sessions While Hiding Behind Victims’ IP Addresses https://b3ncloud.net/article/45077 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112443 https://b3ncloud.net/article/45078 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors https://b3ncloud.net/article/45071 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Revive BlackLotus Techniques to Bypass Windows Secure Boot and Deploy Malware https://b3ncloud.net/article/45079 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116843 - Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode https://b3ncloud.net/article/45083 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116816 - llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer https://b3ncloud.net/article/45082 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116836 - Ubiquiti airMAX M Stored Cross-Site Scripting Privilege Escalation https://b3ncloud.net/article/45081 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116837 - Ubiquiti airMAX M, LTU, SolarPoint, and SolarSwitch Heap-based Buffer Overflow https://b3ncloud.net/article/45080 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116838 - Ubiquiti airMAX M Cross-Site Request Forgery to Command Injection https://b3ncloud.net/article/45084 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2024-58400 - llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs https://b3ncloud.net/article/45073 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112511 https://b3ncloud.net/article/45072 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-112482 https://b3ncloud.net/article/45074 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 Hackers Use VLC Media Player and VMware Tools to Load Malware Through DLL Side-Loading https://b3ncloud.net/article/45086 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116826 - YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile https://b3ncloud.net/article/45085 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116827 - YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import https://b3ncloud.net/article/45087 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116825 - YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox https://b3ncloud.net/article/45088 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 CVE-2026-116808 - OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values https://b3ncloud.net/article/45391 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DSA-6587-1 pdns - security update https://b3ncloud.net/article/45390 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DSA-6588-1 openjdk-21 - security update https://b3ncloud.net/article/45389 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DSA-6589-1 php-mongodb - security update https://b3ncloud.net/article/45388 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DSA-6585-2 thunderbird - regression update https://b3ncloud.net/article/45124 2026-10-27 weekly 0.7 B3ncloud.net de 2026-10-27 DSA-6586-1 valkey - security update https://b3ncloud.net/article/45056 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116819 - OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query https://b3ncloud.net/article/45057 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116818 - OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket https://b3ncloud.net/article/45058 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116811 - OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template https://b3ncloud.net/article/45042 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 University of Copenhagen data breach exposes data of 525,000 people https://b3ncloud.net/article/45061 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116588 - Datadog dd-trace-py: ReDOS in URL query string obfuscation https://b3ncloud.net/article/45060 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116589 - Datadog dd-trace-py: IAST instrumentation can lead to application DOS https://b3ncloud.net/article/45059 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116591 - compress zstd: Panic on two-block frames https://b3ncloud.net/article/45062 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116508 - TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow https://b3ncloud.net/article/45044 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116747 - Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret https://b3ncloud.net/article/45043 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116748 - Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token https://b3ncloud.net/article/45045 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116741 - Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes https://b3ncloud.net/article/45046 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116738 - VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder https://b3ncloud.net/article/45047 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116724 - FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow https://b3ncloud.net/article/45048 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116723 - FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field https://b3ncloud.net/article/45063 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-86929 - Apple macOS Out-of-Bounds Write Vulnerability https://b3ncloud.net/article/45064 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-65327 - Apple macOS Privilege Escalation Vulnerability https://b3ncloud.net/article/45065 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-64759 - Apple Image Processing Integer Overflow Vulnerability https://b3ncloud.net/article/45049 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116506 - TOTOLINK A950RG firewall.so apmib_set command injection https://b3ncloud.net/article/45051 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116504 - TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection https://b3ncloud.net/article/45050 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116505 - TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection https://b3ncloud.net/article/45052 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-113947 - Apple macOS Archive Processing Arbitrary Code Execution https://b3ncloud.net/article/45066 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112688 - Apple iOS, iPadOS, and macOS Memory Corruption Vulnerability https://b3ncloud.net/article/45068 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112655 - Apple WebKit Use-After-Free Vulnerability https://b3ncloud.net/article/45067 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112659 - Apple Safari Type Confusion Vulnerability https://b3ncloud.net/article/45069 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112651 - Apple Safari Use-After-Free Vulnerability https://b3ncloud.net/article/45070 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112637 - Apple Safari and Operating Systems Use-After-Free Vulnerability https://b3ncloud.net/article/45053 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Magento Campaign Infects 953 Online Stores Across Five Domains https://b3ncloud.net/article/45038 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI https://b3ncloud.net/article/45036 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Cisco Rethinks Privileged Infrastructure Access https://b3ncloud.net/article/45039 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115924 - Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs https://b3ncloud.net/article/45040 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110720 - Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules https://b3ncloud.net/article/45037 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento https://b3ncloud.net/article/45022 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116634 - OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens https://b3ncloud.net/article/45023 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-10757 - BUG-000187511 - ArcGIS Server has a security vulnerability. https://b3ncloud.net/article/45024 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-83519: Kritische Windows-Lücke in der Fehlerberichterstattung ermöglicht Codeausführung https://b3ncloud.net/article/45025 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-105608 - Consul vulnerable to an authorization bypass in service mesh registration https://b3ncloud.net/article/45019 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Cloudflare-Chef erwartet etliche weitere Lücken wie php2shell https://b3ncloud.net/article/45026 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-71456 - Johnson Controls Kantech Entrapass Hard-coded Cryptographic Key Vulnerability https://b3ncloud.net/article/45027 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115905 - zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE https://b3ncloud.net/article/45028 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115915 - vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE https://b3ncloud.net/article/45054 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft Investigation Teams Issue Affecting Users in the United States https://b3ncloud.net/article/45029 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-102649 - Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset https://b3ncloud.net/article/45030 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-72753 - Routinator incorrectly handles delta updates https://b3ncloud.net/article/45003 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder https://b3ncloud.net/article/45041 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 EU makes progress towards PHP patching, UK lags behind https://b3ncloud.net/article/45004 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches https://b3ncloud.net/article/45095 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 UK secrecy over AI in immigration and asylum decisions under fire https://b3ncloud.net/article/45034 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116539 - Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO https://b3ncloud.net/article/45033 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116540 - netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback https://b3ncloud.net/article/45032 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116541 - netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount https://b3ncloud.net/article/45031 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116543 - Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser https://b3ncloud.net/article/45005 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 OpenBSD 8.0 Released With Major Security Hardening and Post-Quantum SSH Support https://b3ncloud.net/article/45006 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Emperador Ransomware Group Claims to Have Stolen 3.9GB of Data from the Maker of Budweiser and Corona https://b3ncloud.net/article/45020 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 USN-8956-1: Brotli vulnerability https://b3ncloud.net/article/45007 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112343 - Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing https://b3ncloud.net/article/45035 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware https://b3ncloud.net/article/45008 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft releases emergency .NET patches for critical Brotli flaw https://b3ncloud.net/article/45009 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112346 - OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE https://b3ncloud.net/article/45021 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 USN-8955-1: nginx vulnerabilities https://b3ncloud.net/article/44971 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell: Filigran bewertet die kritischen PHP-Sicherheitslücken https://b3ncloud.net/article/45010 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-93328 - Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write https://b3ncloud.net/article/45012 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77055 - Improper Privilege Assignment in boneIO https://b3ncloud.net/article/45011 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77059 - TOCTOU Race Condition in boneIO https://b3ncloud.net/article/45014 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77052 - Missing Authentication for Node-RED in boneIO https://b3ncloud.net/article/45013 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-77053 - Missing Authentication in Default Configuration in boneIO https://b3ncloud.net/article/45015 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-65184 - Avocent ACS8000 wsserver command injection https://b3ncloud.net/article/45016 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-112345 - TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure https://b3ncloud.net/article/45017 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115748 - Apache Vysper: Authorization bypass https://b3ncloud.net/article/44977 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Angreifer verstecken Schadcode in öffentlicher Google-Tabelle https://b3ncloud.net/article/44978 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Industrial Vendors Check Products for PHP2Shell Vulnerabilities https://b3ncloud.net/article/44979 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Researchers Use AI Agents to Breach Anthropic’s Internal Systems in Just 12 Hours https://b3ncloud.net/article/45018 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116219 - Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter https://b3ncloud.net/article/44972 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans https://b3ncloud.net/article/44980 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More https://b3ncloud.net/article/44973 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 When an AI Agent Is the Incident, the Identity Record Is the Evidence https://b3ncloud.net/article/44981 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-97200 - Unbounded response body buffering and decompression in hackney https://b3ncloud.net/article/44982 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115693 - Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney https://b3ncloud.net/article/44974 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Popcorn Time’s forgotten updater left millions of devices exposed to hijacking https://b3ncloud.net/article/44983 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-107656 - Fortinet FortiSandbox Authentication Bypass https://b3ncloud.net/article/44984 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-108529 - SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit https://b3ncloud.net/article/44985 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-59107 - Shared SSH Authentication Key in vSolution Matrix File Sharing https://b3ncloud.net/article/44986 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110499 - Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit https://b3ncloud.net/article/44987 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-109584 - HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit https://b3ncloud.net/article/44988 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111103 - HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit https://b3ncloud.net/article/44989 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111101 - HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit https://b3ncloud.net/article/44990 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-113436 - Quadratic bignum parsing of Content-Length and Host port values in Bandit https://b3ncloud.net/article/44991 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-114213 - WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit https://b3ncloud.net/article/44992 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115269 - HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit https://b3ncloud.net/article/44975 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell Exploitation Moves From Probes to Working Shells https://b3ncloud.net/article/44993 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-108525 - HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit https://b3ncloud.net/article/44976 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability https://b3ncloud.net/article/44994 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-59106 - Unauthenticated RCE Vulnerability in WolfProt interface implementation https://b3ncloud.net/article/44995 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116485 - danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints https://b3ncloud.net/article/44996 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116214 - MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code https://b3ncloud.net/article/44963 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Snipe-IT: Kritische Authentifizierungsumgehung in Versionen vor 8.6.3 https://b3ncloud.net/article/44964 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111594: InterSystems IRIS for Health mit kritischer Standardkonfiguration bei TLS https://b3ncloud.net/article/44965 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 953 Online Stores Infected in Long-Lasting Malware Campaign https://b3ncloud.net/article/44997 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115193 - Mautic Stored Cross-Site Scripting https://b3ncloud.net/article/44998 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115190 - Mautic Insecure Deserialization Vulnerability https://b3ncloud.net/article/44999 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115189 - Mautic Server-Side Template Injection Vulnerability https://b3ncloud.net/article/44967 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 VLC für Android: Schwachstelle ermöglicht Manipulation von Dateien https://b3ncloud.net/article/44966 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Oracle Java SE: Schwachstelle ermöglicht Offenlegung von Informationen https://b3ncloud.net/article/45000 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115188 - Mautic Unrestricted File Upload Remote Code Execution https://b3ncloud.net/article/45001 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110475 - Improper Authentication Vulnerability in CreditNirvana Collections Platform https://b3ncloud.net/article/44968 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram https://b3ncloud.net/article/45002 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-110474 - Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application https://b3ncloud.net/article/44969 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes https://b3ncloud.net/article/44958 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses https://b3ncloud.net/article/44970 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-94380 - Host Header Injection in HAVELSAN's Liman MYS https://b3ncloud.net/article/44959 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115608 - WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability https://b3ncloud.net/article/44943 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1 https://b3ncloud.net/article/44942 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Kali Linux 2026.3 released with 6 new tools, desktop updates https://b3ncloud.net/article/44944 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages https://b3ncloud.net/article/44945 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Python schließt per Update kritische TLS-Lücke wegen eMudhra-Schlüsseln https://b3ncloud.net/article/44960 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116237 - Oray Pugongying X5 Pro Dnsmasq crlf injection https://b3ncloud.net/article/44961 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-115948 - WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability https://b3ncloud.net/article/44946 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Brotli-Decoder-Lücke nicht nur in Node.js, sondern auch in Bun, Python und mehr https://b3ncloud.net/article/44947 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 7 unbequeme Wahrheiten über Netzwerksicherheit https://b3ncloud.net/article/44948 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts https://b3ncloud.net/article/44949 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts https://b3ncloud.net/article/44936 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 OpenSSL 4.1.0 Released With DTLS 1.3 and Post-Quantum Security Improvements https://b3ncloud.net/article/44937 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 PHP2Shell security flaws now sucessfully exploited in the wild https://b3ncloud.net/article/44950 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-82944 - Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers https://b3ncloud.net/article/44953 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116235 - Oray Pugongying X5 Pro L2TP Authentication crlf injection https://b3ncloud.net/article/44952 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116236 - Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload https://b3ncloud.net/article/44951 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-70388 - Memory Corruption via Integer Underflow in Message Length Validation https://b3ncloud.net/article/44956 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-111841 - WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/44955 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116233 - Oray Pugongying X5 Pro Dnsmasq crlf injection https://b3ncloud.net/article/44954 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 CVE-2026-116234 - Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection https://b3ncloud.net/article/44938 2026-10-26 weekly 0.7 B3ncloud.net de 2026-10-26 Ransomware und KI-Phishing setzen den Mittelstand unter Druck