https://b3ncloud.net/ daily 1.0 2026-11-07 https://b3ncloud.net/news hourly 0.9 2026-11-07 https://b3ncloud.net/tools monthly 0.8 2026-11-07 https://b3ncloud.net/tools/ip-lookup monthly 0.7 2026-11-07 https://b3ncloud.net/tools/dns-lookup monthly 0.7 2026-11-07 https://b3ncloud.net/tools/ip-info monthly 0.7 2026-11-07 https://b3ncloud.net/tools/url-parser monthly 0.6 2026-11-07 https://b3ncloud.net/tools/http-status-codes monthly 0.6 2026-11-07 https://b3ncloud.net/tools/common-ports monthly 0.6 2026-11-07 https://b3ncloud.net/tools/ip-range-calculator monthly 0.6 2026-11-07 https://b3ncloud.net/tools/dns-leak-test monthly 0.7 2026-11-07 https://b3ncloud.net/search daily 0.7 2026-11-07 https://b3ncloud.net/breach-check monthly 0.7 2026-11-07 https://b3ncloud.net/leak-monitor monthly 0.7 2026-11-07 https://b3ncloud.net/phishing-check monthly 0.7 2026-11-07 https://b3ncloud.net/ioc monthly 0.7 2026-11-07 https://b3ncloud.net/ssl monthly 0.7 2026-11-07 https://b3ncloud.net/header monthly 0.7 2026-11-07 https://b3ncloud.net/cve-search weekly 0.8 2026-11-07 https://b3ncloud.net/vulnerability-check weekly 0.7 2026-11-07 https://b3ncloud.net/mitre weekly 0.7 2026-11-07 https://b3ncloud.net/intel daily 0.8 2026-11-07 https://b3ncloud.net/cheatsheets monthly 0.7 2026-11-07 https://b3ncloud.net/dkb weekly 0.7 2026-11-07 https://b3ncloud.net/security-checklist monthly 0.6 2026-11-07 https://b3ncloud.net/incident-response monthly 0.6 2026-11-07 https://b3ncloud.net/firewall-rules monthly 0.6 2026-11-07 https://b3ncloud.net/regex monthly 0.6 2026-11-07 https://b3ncloud.net/cron monthly 0.6 2026-11-07 https://b3ncloud.net/log-analyzer monthly 0.6 2026-11-07 https://b3ncloud.net/subnet monthly 0.6 2026-11-07 https://b3ncloud.net/troubleshooting monthly 0.6 2026-11-07 https://b3ncloud.net/darknet weekly 0.7 2026-11-07 https://b3ncloud.net/stats daily 0.7 2026-11-07 https://b3ncloud.net/updates weekly 0.5 2026-11-07 https://b3ncloud.net/updates/feed.xml hourly 0.6 2026-11-07 https://b3ncloud.net/feed.xml hourly 0.6 2026-11-07 https://b3ncloud.net/cves/feed.xml hourly 0.6 2026-11-07 https://b3ncloud.net/impressum yearly 0.2 2026-11-07 https://b3ncloud.net/datenschutz yearly 0.2 2026-11-07 https://b3ncloud.net/article/46941 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 Hackers pull off $133 million French bank heist via service provider https://b3ncloud.net/article/46943 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-120984 - Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import https://b3ncloud.net/article/46942 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-123966 - Tenda AC19 saveParentControlInfo heap-based overflow https://b3ncloud.net/article/46940 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands https://b3ncloud.net/article/46931 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call https://b3ncloud.net/article/46932 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA https://b3ncloud.net/article/46933 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-120839 - WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability https://b3ncloud.net/article/46934 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-122041 - Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action https://b3ncloud.net/article/46935 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-119075 - Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout https://b3ncloud.net/article/46937 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-118066 - Appointment Booking Plugin <= 5.7.6 - Unauthenticated Authentication Bypass via Account Takeover via 'IS NOT NULL' Sentinel in 'password_reset_token' Parameter https://b3ncloud.net/article/46936 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-118267 - WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert https://b3ncloud.net/article/46939 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-104014 - Naimur Email OTP Verification for WooCommerce <= 2.1.0 - Unauthenticated Authentication Bypass to Account Takeover via Abandoned Password Reset Finalization https://b3ncloud.net/article/46938 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-104746 - Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta https://b3ncloud.net/article/46924 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-119705 https://b3ncloud.net/article/46923 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-119757 https://b3ncloud.net/article/46922 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-85956 https://b3ncloud.net/article/46921 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-123488 https://b3ncloud.net/article/46917 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 Java unter Beschuss: 53 Schwachstellen und zwei Notfall-Patches innerhalb von 5 Tagen https://b3ncloud.net/article/46925 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-123960 - TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow https://b3ncloud.net/article/46926 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-121762 - WordPress PowerPress Podcasting plugin <= 11.18.0 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/46927 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-103900 - WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter https://b3ncloud.net/article/46919 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins https://b3ncloud.net/article/46928 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-66669 - WordPress Superb Addons: Blocks, Patterns &amp; theme Designer plugin <= 4.2.4 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/46929 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-123957 - TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow https://b3ncloud.net/article/46920 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/46918 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-104738 - Advanced Form Integration <= 2.10.2 - Unauthenticated PHP Object Injection via $_POST Parameters https://b3ncloud.net/article/46916 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 Claude Code’s “Yes, and Don’t Ask Again” Option Can Leak Passwords and API Keys to GitHub https://b3ncloud.net/article/46914 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-87112 - QA Assistants <= 5.3.0 - Unauthenticated PHP Object Injection to Remote Code Execution via 'raw_name' and 'dlevent_ver' Parameters https://b3ncloud.net/article/46913 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-73099 https://b3ncloud.net/article/46915 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-18535 - IBM API Connect Denial of Service https://b3ncloud.net/article/46903 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17386 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46904 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-19121 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46905 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-18838 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46906 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17410 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46907 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17407 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46908 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17404 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46909 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17399 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46910 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17396 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46911 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17392 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46912 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-17382 - Multiple Vulnerabilities in IBM API Connect https://b3ncloud.net/article/46898 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 ARTEX AI Agent Escapes Research Sandbox and Accesses WorkOS Customer Records https://b3ncloud.net/article/46901 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-104913 - Interactive Real Estate <= 2.6.0- Authenticated (Subscriber+) Arbitrary File Upload via Project Import ZIP with Crafted image_map.json https://b3ncloud.net/article/46902 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 CVE-2026-93754 - payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution https://b3ncloud.net/article/46899 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure https://b3ncloud.net/article/46883 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks https://b3ncloud.net/article/46930 2026-11-07 weekly 0.7 B3ncloud.net de 2026-11-07 DSA-6613-1 zlib - security update https://b3ncloud.net/article/46896 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-109469 - Entra Device Registration Elevation of Privilege Vulnerability https://b3ncloud.net/article/46882 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Runaway AI hacking agent behind WorkOS breach after escaping sandbox https://b3ncloud.net/article/46885 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-59104 - UgCS server HCI authentication bypass with empty credentials https://b3ncloud.net/article/46884 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-68935 - Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections https://b3ncloud.net/article/46886 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-50240 - Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount https://b3ncloud.net/article/46887 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-86005 - Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew https://b3ncloud.net/article/46889 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-85712 - Chartbrew: Cross-tenant project takeover via body.team_id in /project routes https://b3ncloud.net/article/46888 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-85736 - Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH paths https://b3ncloud.net/article/46891 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-71397 - Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server https://b3ncloud.net/article/46890 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-85295 - Chartbrew: Full account takeover via JWTs accepted under default CB_SECRET https://b3ncloud.net/article/46892 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-54349 - Chartbrew SQL injection in dashboard filter substitution https://b3ncloud.net/article/46894 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-102344 - Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server https://b3ncloud.net/article/46893 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-102530 - JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL https://b3ncloud.net/article/46870 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-124078 - plist.js before 5.0.1 Uncontrolled Resource Consumption via Binary Parser https://b3ncloud.net/article/46871 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-86044 - JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution https://b3ncloud.net/article/46868 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs https://b3ncloud.net/article/46872 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-63439 - 2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification https://b3ncloud.net/article/46873 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-63438 - 2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value https://b3ncloud.net/article/46874 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-65960 - Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods https://b3ncloud.net/article/46875 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-58490 - Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults https://b3ncloud.net/article/46877 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-124040 - CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State https://b3ncloud.net/article/46876 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-33050 - GeoNode: OS command injection via uploaded file layer name https://b3ncloud.net/article/46878 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-124027 - ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage https://b3ncloud.net/article/46879 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123998 - Hisense VIDAA Smart TV MQTT Broker Authentication Bypass https://b3ncloud.net/article/46881 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-107154 - SonicOS Session Validation Bypass Vulnerability https://b3ncloud.net/article/46880 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-107155 - SonicWall SonicOS Cross-Domain Policy Vulnerability https://b3ncloud.net/article/46856 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-73100 https://b3ncloud.net/article/46855 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-73098 https://b3ncloud.net/article/46854 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-121489 https://b3ncloud.net/article/46857 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123993 - Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access https://b3ncloud.net/article/46858 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Fake security tools on GitHub push backdoors and infostealers https://b3ncloud.net/article/46859 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Free Chinese AI Models Are Getting Scary Good at Hacking https://b3ncloud.net/article/46860 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-119924 - Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser https://b3ncloud.net/article/46861 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-119923 - Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser https://b3ncloud.net/article/46862 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-89017 - Skyline DataMiner BrokerGateway Embedded API Key Authentication Bypass https://b3ncloud.net/article/46863 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-118670 - OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document https://b3ncloud.net/article/46852 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-118869 https://b3ncloud.net/article/46864 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-71495 - Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access https://b3ncloud.net/article/46853 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Mindfactory informiert Kunden über Cyberangriff https://b3ncloud.net/article/46865 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-85743 - FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks https://b3ncloud.net/article/46866 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123962 - FreedomBox Arbitrary File Read and Write Vulnerability https://b3ncloud.net/article/46867 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-122193 - OS command injection in the example SSM documents in Trusted Remote Execution (REX) https://b3ncloud.net/article/46827 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 QNAP says hackers breaching NAS devices in Plex2Shell attacks https://b3ncloud.net/article/46828 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123792 - Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process https://b3ncloud.net/article/46830 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123623 - Grida through 0.0.24 Missing Authorization in Forms File-Preview API https://b3ncloud.net/article/46829 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123675 - OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection https://b3ncloud.net/article/46831 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-121623 - Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File https://b3ncloud.net/article/46832 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-118515 - Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File https://b3ncloud.net/article/46833 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123859 - SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core) https://b3ncloud.net/article/46834 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123836 - JetBrains Datalore SSH Private Key Exposure https://b3ncloud.net/article/46835 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123832 - JetBrains CLion Safe Mode Remote Code Execution https://b3ncloud.net/article/46836 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time https://b3ncloud.net/article/46837 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Veeam warns of Software Appliance boot failures on AMD EPYC hosts https://b3ncloud.net/article/46838 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot https://b3ncloud.net/article/46839 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-53980 - Charmbracelet Wish 2.0.5 Path Traversal via git Middleware https://b3ncloud.net/article/46842 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123783 - Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode https://b3ncloud.net/article/46841 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123784 - Fluxbox through 1.3.7 OS Command Injection via Style Background Values https://b3ncloud.net/article/46840 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123786 - Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token https://b3ncloud.net/article/46843 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123621 - Usermin through 2.570 Path Traversal File Write via detachall.cgi https://b3ncloud.net/article/46846 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123488 - Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpoint https://b3ncloud.net/article/46845 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123490 - Craft CMS before 5.11.2 Privilege Escalation via getOwners() Sandbox Bypass https://b3ncloud.net/article/46844 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123491 - Craft CMS 4.0.0 before 4.18.9 Unauthenticated SQL Injection via GraphQL Eager-Load Select https://b3ncloud.net/article/46847 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123487 - Parse Server 9.0.0 before 9.10.7-alpha.1 ReDoS via Email Validation Regex https://b3ncloud.net/article/46850 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-112338 - Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Pagination https://b3ncloud.net/article/46849 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-112339 - Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module https://b3ncloud.net/article/46848 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-112340 - Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request https://b3ncloud.net/article/46817 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 USN-8952-2: Tornado regression https://b3ncloud.net/article/46818 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 New Dark Project Ransomware Group Offers Hackers 80% Commission to Expand Cyberattacks https://b3ncloud.net/article/46819 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It https://b3ncloud.net/article/46820 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Diese Maßnahmen sollten CISOs bis Ende 2026 anstoßen https://b3ncloud.net/article/46851 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits https://b3ncloud.net/article/46821 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-119170 - Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10 https://b3ncloud.net/article/46807 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days https://b3ncloud.net/article/46794 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Okta und AWS vertiefen Partnerschaft: Identitätssicherheit für KI-Agenten im Fokus https://b3ncloud.net/article/46808 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Microsoft Warns Fake Game Downloads Are Secretly Monetizing Windows PCs https://b3ncloud.net/article/46809 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Anthropic’s Claude Code Reportedly Leaks User Email Addresses Through HTTP User-Agent Headers https://b3ncloud.net/article/46822 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-106019 - Johnson Controls C-CURE 9000 and Victor Sensitive Information Exposure in Log Files https://b3ncloud.net/article/46810 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Chainalysis says breach exposed credentials for all customers https://b3ncloud.net/article/46811 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-117679 https://b3ncloud.net/article/46812 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Hackers Launch 240,000 Exploit Attempts WordPress Core Flaw Enabling Remote Code Execution https://b3ncloud.net/article/46823 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-59105 - Universal sysadmin credential vulnerability in Jumis https://b3ncloud.net/article/46824 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-106022 - Johnson Controls EasyIO Neo IOManager and Tools Installer Cleartext Storage of Sensitive Information in Memory https://b3ncloud.net/article/46813 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Plattformen offline: Cyberangriff auf TU München https://b3ncloud.net/article/46825 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-106020 - Johnson Controls EasyIO Neo IO Manager and Tools Installer Search Order Hijacking Vulnerability https://b3ncloud.net/article/46814 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 DigiCert Data Breach Impacts Business Customer Information https://b3ncloud.net/article/46815 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 ARTEX AI Agents Steal 190,000 Gaming Credentials and Hundreds of Apple Code-Signing Certificates https://b3ncloud.net/article/46816 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Moodle: Schwachstelle ermöglicht Offenlegung von Informationen https://b3ncloud.net/article/46795 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line https://b3ncloud.net/article/46796 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2025-71457 https://b3ncloud.net/article/46797 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 LibreOffice: Schwachstelle ermöglicht Denial-of-Service https://b3ncloud.net/article/46798 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 D-Link warns of multiple zero-days in DGS-3130 Series switches https://b3ncloud.net/article/46799 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries https://b3ncloud.net/article/46800 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-92895 - Live2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' Parameter https://b3ncloud.net/article/46801 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-85111 - Apache James: Denial of service upon MIME parsing https://b3ncloud.net/article/46802 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-116624 - Advanced Members for ACF <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form https://b3ncloud.net/article/46804 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-107622 - BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter https://b3ncloud.net/article/46803 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-114630 - ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter https://b3ncloud.net/article/46774 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CodeRabbit stellt kostenlose Security-Scans im Wert von 1 Mio. US-Dollar bereit https://b3ncloud.net/article/46787 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Hackers Use ARTEX AI to Find GitHub Secrets and Steal Azure Key Vault Data in Just 5 Minutes https://b3ncloud.net/article/46788 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass https://b3ncloud.net/article/46805 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It https://b3ncloud.net/article/46806 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers https://b3ncloud.net/article/46789 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack https://b3ncloud.net/article/46790 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 iOS-Blockierungsmodus umgangen: Wie der jüngste Exploit von Calif.io arbeitet https://b3ncloud.net/article/46791 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 USN-9003-1: Linux kernel (NVIDIA) vulnerabilities https://b3ncloud.net/article/46900 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 The Flood is Coming And The Pipes Were Already Full https://b3ncloud.net/article/46792 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities https://b3ncloud.net/article/46793 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Attacken auf Cisco UCS Central Software und Unified CM können bevorstehen https://b3ncloud.net/article/46775 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-115701 - Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion https://b3ncloud.net/article/46776 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-113431 - Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion https://b3ncloud.net/article/46777 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123323 - JetBrains YouTrack Improper URL Validation Vulnerability https://b3ncloud.net/article/46778 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123317 - JetBrains Ktor Session Forgery Vulnerability https://b3ncloud.net/article/46779 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123301 - JetBrains IntelliJ IDEA DOM-based Cross-Site Scripting Vulnerability https://b3ncloud.net/article/46780 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123295 - JetBrains Hub Two-Factor Authentication Bypass https://b3ncloud.net/article/46781 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123294 - JetBrains Hub Privilege Escalation Vulnerability https://b3ncloud.net/article/46782 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123280 - JetBrains Datalore Remote Code Execution https://b3ncloud.net/article/46783 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123279 - JetBrains Datalore Arbitrary Code Execution https://b3ncloud.net/article/46785 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-123087 - SQL injection in Atmira’s SIREC https://b3ncloud.net/article/46784 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-33379 - Dashboard snapshot permission bypass https://b3ncloud.net/article/46826 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAI Reports Covert Underperformance in GPT-6 Astra https://b3ncloud.net/article/46762 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 SEPPmail Secure Email Gateway: Kritische Lücken CVE-2026-114424 und CVE-2026-114425 vor Version 15.1.1 https://b3ncloud.net/article/46763 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Kritische Schwachstelle in Zyxel-Switches erlaubt Codeausführung aus der Ferne https://b3ncloud.net/article/46764 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 ARTEX AI Hacking Framework Found on 1,465 Public Servers, Some Hosting Cyberattack Tools https://b3ncloud.net/article/46759 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Claude Dispatch Flaw Lets Malicious Browser Extensions Run Code on Connected Computers https://b3ncloud.net/article/46767 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-88799 - MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR https://b3ncloud.net/article/46766 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-88800 - MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion https://b3ncloud.net/article/46765 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-88801 - MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation https://b3ncloud.net/article/46770 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-121820 - Armeria SAML HTTP-Redirect Binding Memory Exhaustion Denial of Service https://b3ncloud.net/article/46769 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-121823 - Armeria Path Traversal Vulnerability https://b3ncloud.net/article/46768 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-121824 - Armeria Thrift Malformed Message Denial of Service Vulnerability https://b3ncloud.net/article/46772 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-119516 - WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerability https://b3ncloud.net/article/46771 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-120844 - WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability https://b3ncloud.net/article/46773 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-118423 - WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload https://b3ncloud.net/article/46760 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Hackers Could Bypass ChatGPT Lockdown Mode to Steal Conversations Without Users Knowing https://b3ncloud.net/article/46761 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services https://b3ncloud.net/article/46756 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Top 10 Best Deception Technology Solutions in 2026 [Ranked & Scored] https://b3ncloud.net/article/46754 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Adobe Commerce und Magento von Code-Ausführung bedroht https://b3ncloud.net/article/46757 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs https://b3ncloud.net/article/46758 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login https://b3ncloud.net/article/46753 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-119432 - Foxit Workspace Stored XSS in shared artifacts https://b3ncloud.net/article/46755 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAIs für Cybersecurity verbessertes KI-Modell GPT-6 Cyber hält sich an Regeln https://b3ncloud.net/article/46752 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 OpenAI Launches GPT-6 Cyber That Finds 81 Firefox Flaws and Develops 948 Linux Exploits https://b3ncloud.net/article/46739 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 Microsoft Paint 0-Click Vulnerability Could Allow Hackers to Take Control of Windows PCs https://b3ncloud.net/article/46740 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 FBI, CISA warn of cyberattacks targeting refrigeration systems https://b3ncloud.net/article/46741 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-107492 - Envoy Proxy Improper Authentication Vulnerability https://b3ncloud.net/article/46742 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2025-71458 - FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo https://b3ncloud.net/article/46743 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-63774 - Subnet Solutions PowerSYSTEM Center SQL Injection https://b3ncloud.net/article/46744 2026-11-06 weekly 0.7 B3ncloud.net de 2026-11-06 CVE-2026-63017 - Subnet Solutions PowerSYSTEM Center Incorrect Authorization https://b3ncloud.net/article/46737 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 WatchGuard AuthPoint Gateway: Drei kritische Schwachstellen bedrohen Authentifizierungsdienste https://b3ncloud.net/article/46738 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Linksys E5350: Kritische Command-Injection in Firmware 1.0.00.037 öffentlich bekannt https://b3ncloud.net/article/46746 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-92695 - FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames https://b3ncloud.net/article/46745 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-92698 - FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read https://b3ncloud.net/article/46749 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-88980 - Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator https://b3ncloud.net/article/46748 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-88981 - Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints https://b3ncloud.net/article/46747 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-92693 - FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser https://b3ncloud.net/article/46750 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-77596 - Kubeflow Pipelines API server lacks authorization for shared pipeline uploads https://b3ncloud.net/article/46751 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-113663 - AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution https://b3ncloud.net/article/46719 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-58273 - Rucio: Authorisation Bypass on REST API endpoint for signing URLs https://b3ncloud.net/article/46720 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-33944 - Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter https://b3ncloud.net/article/46869 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Phone return scams: where a real delivery and a fake return end up in a bill for you https://b3ncloud.net/article/46721 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122267 - MinIO Signature V4 Authentication Bypass Vulnerability https://b3ncloud.net/article/46722 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-119757 - BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure https://b3ncloud.net/article/46724 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-111493 - Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint https://b3ncloud.net/article/46723 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-111494 - Incorrect validation of TLS certificates in the MatchPoint Android app https://b3ncloud.net/article/46727 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-111489 - A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform https://b3ncloud.net/article/46726 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-111490 - Insecure direct object reference (IDOR) vulnerability in the MatchPoint API https://b3ncloud.net/article/46725 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-111492 - SQL injection in the push notification handler of the MatchPoint Android app https://b3ncloud.net/article/46718 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 NIKKE PC launcher compromise put players’ passwords and personal files at risk https://b3ncloud.net/article/46692 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts https://b3ncloud.net/article/46728 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-85076 - Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401) https://b3ncloud.net/article/46729 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-77622 - Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder https://b3ncloud.net/article/46732 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-46350 - dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS https://b3ncloud.net/article/46731 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-48705 - MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) https://b3ncloud.net/article/46730 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-49272 - OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow https://b3ncloud.net/article/46733 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-114604 - GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments https://b3ncloud.net/article/46735 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-112902 - Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags https://b3ncloud.net/article/46734 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-114134 - Black: GitHub Action installs unvalidated required-version from pyproject.toml https://b3ncloud.net/article/46693 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-77876 https://b3ncloud.net/article/46695 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116788 - FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding https://b3ncloud.net/article/46694 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116790 - FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY https://b3ncloud.net/article/46698 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116783 - FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data https://b3ncloud.net/article/46697 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116785 - FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling https://b3ncloud.net/article/46696 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116786 - FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia https://b3ncloud.net/article/46699 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116779 - FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands https://b3ncloud.net/article/46700 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-115573 - OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration https://b3ncloud.net/article/46736 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-110930 - Codex Desktop Arbitrary Code Execution via Path Injection https://b3ncloud.net/article/46701 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-103935 - OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute https://b3ncloud.net/article/46702 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-102940 - OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment https://b3ncloud.net/article/46703 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-97377 - SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_list https://b3ncloud.net/article/46705 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-71548 - SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database https://b3ncloud.net/article/46704 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-71550 - SuiteCRM: LFI to RCE via AOW_WorkFlow https://b3ncloud.net/article/46708 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-69140 - SuiteCRM: SQL injection via get_latest_for_id param in GetLatestRevision.php https://b3ncloud.net/article/46707 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-69141 - SuiteCRM: SQL injection via search param in modules/Cases/controller.php https://b3ncloud.net/article/46706 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-69142 - SuiteCRM: Authenticated SQL Injection in map_markers distance Parameter https://b3ncloud.net/article/46709 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-69134 - SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Management https://b3ncloud.net/article/46711 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-63214 - SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api https://b3ncloud.net/article/46710 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-63215 - SuiteCRM: Time-Based Blind SQL Injection via REST API https://b3ncloud.net/article/46715 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-61648 - SuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.php https://b3ncloud.net/article/46714 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-61650 - SuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorization https://b3ncloud.net/article/46713 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-61651 - SuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controller https://b3ncloud.net/article/46712 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-61653 - SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php https://b3ncloud.net/article/46666 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-58115 https://b3ncloud.net/article/46667 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123272 - mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata https://b3ncloud.net/article/46668 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123271 - ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator https://b3ncloud.net/article/46670 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-96453 - Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates https://b3ncloud.net/article/46669 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-97175 - Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover https://b3ncloud.net/article/46672 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-77439 - Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints https://b3ncloud.net/article/46671 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-92857 - Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens https://b3ncloud.net/article/46674 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-54912 - WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch https://b3ncloud.net/article/46673 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-54914 - WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer https://b3ncloud.net/article/46675 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-120859 - PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings Files https://b3ncloud.net/article/46677 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-107129 - Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0 https://b3ncloud.net/article/46676 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-107903 - Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0 https://b3ncloud.net/article/46678 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-105607 - Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0 https://b3ncloud.net/article/46679 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123208 - noname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Server https://b3ncloud.net/article/46680 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123205 - accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql https://b3ncloud.net/article/46681 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123202 - libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name https://b3ncloud.net/article/46682 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123200 - VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index https://b3ncloud.net/article/46683 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123198 - LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID> https://b3ncloud.net/article/46684 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123196 - Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata https://b3ncloud.net/article/46685 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-118494 - Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 https://b3ncloud.net/article/46665 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 OpenSSH flaw lets attackers log into password-disabled Linux accounts https://b3ncloud.net/article/46643 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research https://b3ncloud.net/article/46633 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Check Point entdeckt Prompt Adware: Neue Angriffsmethode manipuliert KI-Agenten dauerhaft https://b3ncloud.net/article/46686 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-82413 - ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`) https://b3ncloud.net/article/46689 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-54146 - OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive) https://b3ncloud.net/article/46688 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-75614 - ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN) https://b3ncloud.net/article/46687 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-76077 - ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT() https://b3ncloud.net/article/46691 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-54143 - OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution https://b3ncloud.net/article/46690 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-54145 - OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response) https://b3ncloud.net/article/46644 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-120499 - h5io before 0.2.6 Arbitrary Code Execution via read_hdf5 https://b3ncloud.net/article/46716 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux https://b3ncloud.net/article/46717 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction https://b3ncloud.net/article/46645 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-119083 - GluonTS arbitrary file write during archive extraction https://b3ncloud.net/article/46646 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hackers backdoor Linux servers using trojanized CWP web server https://b3ncloud.net/article/46647 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73856 - ModSecurity: Response Body Inspection Bypass https://b3ncloud.net/article/46648 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123158 - OpenSSH Authentication Bypass Vulnerability https://b3ncloud.net/article/46649 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122329 - SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder https://b3ncloud.net/article/46650 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-119344 - Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks https://b3ncloud.net/article/46651 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-107891 - musl libc Integer Overflow in Regular Expression Compilation https://b3ncloud.net/article/46652 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-104269 - ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java) https://b3ncloud.net/article/46653 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-102523 - MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION https://b3ncloud.net/article/46634 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 DigiCert data breach exposes customer information, identity documents https://b3ncloud.net/article/46654 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-121997 - Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch https://b3ncloud.net/article/46655 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-121996 - Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length https://b3ncloud.net/article/46656 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-121994 - Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length https://b3ncloud.net/article/46657 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-114232 - Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access https://b3ncloud.net/article/46658 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-112208 - Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login https://b3ncloud.net/article/46635 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Firewalling the AI Era: Why the Network Still Decides https://b3ncloud.net/article/46636 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Closing the Identity Gap at the Service Desk https://b3ncloud.net/article/46637 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 BSI setzt Zeitmarken für den Umstieg auf quantensichere Verfahren https://b3ncloud.net/article/46630 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hackers Turn Popular Chinese Keyboard Software Into a Backdoor for Cyberespionage Attacks https://b3ncloud.net/article/46611 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Wie schützt ein Domain-Check vor Phishing und Betrug? https://b3ncloud.net/article/46631 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers https://b3ncloud.net/article/46638 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-119744 - Cendio ThinLinc Improper Authentication via Web Access https://b3ncloud.net/article/46639 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 USN-9001-1: ca-certificates update https://b3ncloud.net/article/46659 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 USN-8955-2: nginx vulnerabilities https://b3ncloud.net/article/46663 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-82912 - Apache OFBiz: Unsandboxed Groovy compiled from a service parameter https://b3ncloud.net/article/46662 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-82960 - Apache OFBiz: Widget use-when Expression Injection Bypasses Groovy Sandbox for authenticated RCE https://b3ncloud.net/article/46661 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-83542 - Apache OFBiz: Unauthenticated RCE via login-page widget injection https://b3ncloud.net/article/46660 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-84183 - Apache OFBiz: Content Manager VIEW-only RCE in updateLayout https://b3ncloud.net/article/46640 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-117691 - Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names https://b3ncloud.net/article/46632 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 HYFLOCK Ransomware Encrypts Only First 4KB of Larger Files, Leaves Parts of Victims’ Files Accessible https://b3ncloud.net/article/46664 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 USN-7230-3: FRR regression https://b3ncloud.net/article/46612 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns https://b3ncloud.net/article/46615 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73696 https://b3ncloud.net/article/46614 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73695 https://b3ncloud.net/article/46613 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73697 https://b3ncloud.net/article/46616 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 ARTEX Hackers Expose Their Own Servers, Revealing AI Tools Behind South Korean Bank Breaches https://b3ncloud.net/article/46617 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised https://b3ncloud.net/article/46641 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 USN-8972-2: HAProxy regression https://b3ncloud.net/article/46618 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 SonicWall Global Management System verwundbar, bekommt aber keine Updates mehr https://b3ncloud.net/article/46608 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws https://b3ncloud.net/article/46619 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out https://b3ncloud.net/article/46624 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73100 - Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors https://b3ncloud.net/article/46623 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73101 - Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults https://b3ncloud.net/article/46622 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73116 - Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects https://b3ncloud.net/article/46621 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73117 - Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data https://b3ncloud.net/article/46620 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-96677 - Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chrome https://b3ncloud.net/article/46627 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73095 - Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handling https://b3ncloud.net/article/46626 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73098 - Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing https://b3ncloud.net/article/46625 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-73099 - Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override https://b3ncloud.net/article/46629 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-121489 - Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory https://b3ncloud.net/article/46628 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123018 - eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection https://b3ncloud.net/article/46609 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Vizio, Samsung smart TVs seem to ignore tracking opt outs https://b3ncloud.net/article/46610 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 The Agent Smith Dilemma: Governing Agentic Identities https://b3ncloud.net/article/46602 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality https://b3ncloud.net/article/46603 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hackers Hide Marsalek Malware in Fake Roblox and Fortnite Cheats to Steal Passwords and Crypto Wallet Data https://b3ncloud.net/article/46604 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day https://b3ncloud.net/article/46605 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Tata Motors iRA App Flaws Could Let Hackers Impersonate Car Owners and Access Vehicle Services https://b3ncloud.net/article/46606 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes https://b3ncloud.net/article/46588 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hacker manipulieren Kühlanlagen: Warum veraltete OT-Systeme zum Sicherheitsrisiko werden https://b3ncloud.net/article/46607 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 https://b3ncloud.net/article/46597 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks https://b3ncloud.net/article/46598 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Russian APT29 Targets Mobile Users with Watering Hole Attacks https://b3ncloud.net/article/46599 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2024-27834: Aktiv ausgenutzte Apple-Schwachstelle betrifft iPhone, Mac und Safari https://b3ncloud.net/article/46589 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 GhostMap Android flaw lets malicious app trigger persistent boot loop https://b3ncloud.net/article/46590 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 One Hacker Uses 12 AI Agents to Breach Taiwan’s Emergency Services and Steal Sensitive Data https://b3ncloud.net/article/46600 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access https://b3ncloud.net/article/46591 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Jetzt patchen! Attacken auf Zyxel-Switches beobachtet https://b3ncloud.net/article/46592 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hackers Trick Mac Users Into Running Terminal Commands That Install Phexia Password-Stealing Malware https://b3ncloud.net/article/46593 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-118869 - SHIRASAGI OS Command Injection Vulnerability https://b3ncloud.net/article/46594 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-100109 - Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user https://b3ncloud.net/article/46574 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hackers Use Fake Government Websites and CAPTCHA Checks to Deliver SimpleHelp Remote Access Software https://b3ncloud.net/article/46575 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Top 10 Best Security Data Lake Platforms in 2026 [Ranked & Scored] https://b3ncloud.net/article/46595 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123033 - TrueNAS SCALE middlewared Authentication Bypass https://b3ncloud.net/article/46596 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution https://b3ncloud.net/article/46576 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123025 - OPNsense os-acme-client Google Cloud DNS OS Command Injection https://b3ncloud.net/article/46571 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents https://b3ncloud.net/article/46577 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 U.S. Charges Canadian Man in Alleged Hack of University Supercomputers https://b3ncloud.net/article/46578 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-123014 - iTerm2 Argument Injection Vulnerability https://b3ncloud.net/article/46572 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Oracle WebLogic ermöglicht Datenzugriff ohne Anmeldung https://b3ncloud.net/article/46579 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-93389 - LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching https://b3ncloud.net/article/46581 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-116617 - Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter https://b3ncloud.net/article/46580 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-118193 - GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter https://b3ncloud.net/article/46573 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says https://b3ncloud.net/article/46570 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run https://b3ncloud.net/article/46601 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 SailPoint: Anarchy reigns over enterprise agentic AI https://b3ncloud.net/article/46548 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails https://b3ncloud.net/article/46549 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 OpenAI Cyber Model Uncovers 948 Linux Kernel Privilege Escalation Vulnerabilities https://b3ncloud.net/article/46550 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122992 - DStarGateway Integer Underflow https://b3ncloud.net/article/46551 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122323 - Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression https://b3ncloud.net/article/46552 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122321 - Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass https://b3ncloud.net/article/46553 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122320 - Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone https://b3ncloud.net/article/46554 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122319 - Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic https://b3ncloud.net/article/46555 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122316 - Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting https://b3ncloud.net/article/46556 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122315 - Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic https://b3ncloud.net/article/46558 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122313 - Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy https://b3ncloud.net/article/46557 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122314 - Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic https://b3ncloud.net/article/46559 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122312 - Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String https://b3ncloud.net/article/46560 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122311 - Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument https://b3ncloud.net/article/46562 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122309 - Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost https://b3ncloud.net/article/46561 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122310 - Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath https://b3ncloud.net/article/46563 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122308 - Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest https://b3ncloud.net/article/46565 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122306 - Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching https://b3ncloud.net/article/46564 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122307 - Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling https://b3ncloud.net/article/46566 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122305 - Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop https://b3ncloud.net/article/46568 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122303 - Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy https://b3ncloud.net/article/46567 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122304 - Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader https://b3ncloud.net/article/46569 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122302 - Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check https://b3ncloud.net/article/46540 2026-11-05 weekly 0.7 B3ncloud.net de 2026-11-05 CVE-2026-122051 - Edimax BR-6208AC mp command injection https://b3ncloud.net/article/46542 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-76892 - tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process https://b3ncloud.net/article/46541 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-77372 - VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path) https://b3ncloud.net/article/46543 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-52848 - GLPI: MFA bypass https://b3ncloud.net/article/46544 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-47678 - GLPI: Blind Time based SQLI in dropdowns https://b3ncloud.net/article/46545 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122299 - Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation https://b3ncloud.net/article/46547 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-108387 - radare2: Remote code execution when loading Pebble/SMD binary https://b3ncloud.net/article/46546 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-115770 - Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing https://b3ncloud.net/article/46523 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54384 - VitaFit Cloud API Authentication Bypass via POST /front/login/sns/ https://b3ncloud.net/article/46525 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-57567 - Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview https://b3ncloud.net/article/46524 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-97693 - Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise https://b3ncloud.net/article/46527 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-55368 - h2o: buffer overflow when using the %{error}x log directive https://b3ncloud.net/article/46526 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-57566 - Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy https://b3ncloud.net/article/46531 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54374 - VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure https://b3ncloud.net/article/46530 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54375 - VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure https://b3ncloud.net/article/46529 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54376 - VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking https://b3ncloud.net/article/46528 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54378 - VitaFit Cloud API Broken Access Control via S3 Token Endpoint https://b3ncloud.net/article/46532 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54372 - VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation https://b3ncloud.net/article/46533 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS https://b3ncloud.net/article/46536 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-102894 - GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover https://b3ncloud.net/article/46535 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-102895 - GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin https://b3ncloud.net/article/46534 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-103002 - GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover https://b3ncloud.net/article/46537 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-54381 - VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure https://b3ncloud.net/article/46500 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Vercel rolls out new protection against stolen session cookie attacks https://b3ncloud.net/article/46538 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-82418 - IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL https://b3ncloud.net/article/46522 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released https://b3ncloud.net/article/46501 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Zyxel fixes zero-day exploited to hack nearly 1,000 network switches https://b3ncloud.net/article/46502 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122224 - WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints https://b3ncloud.net/article/46504 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122134 - Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers https://b3ncloud.net/article/46503 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122135 - Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program https://b3ncloud.net/article/46505 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122133 - Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe https://b3ncloud.net/article/46506 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122130 - CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin https://b3ncloud.net/article/46508 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122126 - reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket https://b3ncloud.net/article/46507 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122127 - CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decoder https://b3ncloud.net/article/46509 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2025-71457 - vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php https://b3ncloud.net/article/46510 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2025-71456 - vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView https://b3ncloud.net/article/46511 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-11376 - IBM MQ is affected by a denial of service vulnerability https://b3ncloud.net/article/46512 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-11724 - IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability https://b3ncloud.net/article/46513 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-13271 - IBM MQ Managed File Transfer is affected by a denial of service vulnerability https://b3ncloud.net/article/46514 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122220 - WPO365 LOGIN before 45.2 SAML Replay Protection Bypass https://b3ncloud.net/article/46515 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121933 - Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication https://b3ncloud.net/article/46516 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-113374 - Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation https://b3ncloud.net/article/46517 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-113373 - Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again https://b3ncloud.net/article/46519 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121931 - Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection https://b3ncloud.net/article/46518 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121932 - Linksys E5350 apply.cgi system os command injection https://b3ncloud.net/article/46521 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-107846 - bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list https://b3ncloud.net/article/46520 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-113780 - ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary https://b3ncloud.net/article/46488 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 DreamHost confirms data breach exposed FTP logins and webmail sessions https://b3ncloud.net/article/46495 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe https://b3ncloud.net/article/46489 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 SkyW4lker Phishing Campaign Expands, Threatening US Enterprises with Microsoft 365 Account Takeovers https://b3ncloud.net/article/46490 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-82033 - DeepSeek Harness Unauthenticated RPC Command Execution https://b3ncloud.net/article/46491 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122148 - Yealink MeetingBoard Pro Front-End Validation Bypass Vulnerability https://b3ncloud.net/article/46492 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-57853 - DataGerry < 3.3.0 SSTI via DocAPI Template Rendering https://b3ncloud.net/article/46493 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121971 - Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References https://b3ncloud.net/article/46484 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 6 Challenges SOC Leaders Should Turn into Priorities in 2027 https://b3ncloud.net/article/46494 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122120 - Yealink Plug-in Software Unauthorized File Write Vulnerability https://b3ncloud.net/article/46786 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 mSecure tells users to change passwords but won’t say why [updated] https://b3ncloud.net/article/46461 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Critical Ruby on Rails Flaw Could Let Hackers Steal Server Secrets Through Malicious Image Uploads https://b3ncloud.net/article/46485 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root https://b3ncloud.net/article/46486 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records https://b3ncloud.net/article/46462 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 NIKKE PC game launcher hacked to spread remote access, data-stealing malware https://b3ncloud.net/article/46463 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-119749 - GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass https://b3ncloud.net/article/46464 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Debian and Ubuntu APT Flaw Lets Hackers Hijack Software Updates and Execute Code as Root https://b3ncloud.net/article/46496 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 USN-9000-1: Twisted vulnerability https://b3ncloud.net/article/46465 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-92704 - SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution https://b3ncloud.net/article/46466 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121966 - Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak https://b3ncloud.net/article/46470 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121961 - FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race https://b3ncloud.net/article/46469 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121962 - FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read https://b3ncloud.net/article/46468 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121963 - FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close https://b3ncloud.net/article/46467 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121964 - FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment https://b3ncloud.net/article/46475 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121955 - FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext https://b3ncloud.net/article/46474 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121956 - FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt https://b3ncloud.net/article/46473 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121957 - FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race https://b3ncloud.net/article/46472 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121958 - FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys https://b3ncloud.net/article/46471 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121960 - FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest https://b3ncloud.net/article/46478 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121951 - FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event https://b3ncloud.net/article/46477 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121952 - FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability https://b3ncloud.net/article/46476 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121953 - FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close https://b3ncloud.net/article/46479 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-119746 - ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies https://b3ncloud.net/article/46497 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 USN-8999-1: Pillow vulnerabilities https://b3ncloud.net/article/46498 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 USN-8997-1: Net-SNMP vulnerability https://b3ncloud.net/article/46483 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121637 - WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results https://b3ncloud.net/article/46482 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121638 - WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks https://b3ncloud.net/article/46481 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121639 - WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service https://b3ncloud.net/article/46480 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121640 - WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions https://b3ncloud.net/article/46487 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 USN-7530-2: ADOdb vulnerability https://b3ncloud.net/article/46457 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Google Calendar phishing campaign hijacks sessions, bypasses MFA https://b3ncloud.net/article/46458 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 KI im Fokus der Cyberabwehr https://b3ncloud.net/article/46451 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 SonicWall warns of unpatched flaws in end-of-life GMS software https://b3ncloud.net/article/46452 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits https://b3ncloud.net/article/46453 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Barracuda ESG Authentication Bypass Flaw Opens Path to Root https://b3ncloud.net/article/46459 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-118391 - Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto https://b3ncloud.net/article/46460 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-122006 - ActiveStorage ImageMagick Arbitrary File Access Vulnerability https://b3ncloud.net/article/46454 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Gorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies https://b3ncloud.net/article/46455 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Autonomous SASE: Wie KI die Spielregeln der Cybersecurity verändert https://b3ncloud.net/article/46456 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 The Sandbox Fights Back: Joe Security Launches Adaptive Detonation https://b3ncloud.net/article/46499 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 USN-8996-1: APT vulnerability https://b3ncloud.net/article/46436 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems https://b3ncloud.net/article/46437 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 US charges two Canadians accused of hacking US universities https://b3ncloud.net/article/46438 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Critical Barracuda Security Flaws Could Let Hackers Bypass Authentication and Gain Root Access https://b3ncloud.net/article/46439 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Node.js Schedules High-Severity Security Fixes for 22.x, 24.x, and 26.x Release Lines https://b3ncloud.net/article/46440 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Apache OpenOffice: Mehrere Schwachstellen https://b3ncloud.net/article/46441 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks https://b3ncloud.net/article/46442 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121147 - Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application https://b3ncloud.net/article/46443 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121620 - CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification https://b3ncloud.net/article/46445 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121940 - Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers https://b3ncloud.net/article/46444 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121941 - libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex https://b3ncloud.net/article/46446 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121939 - Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking https://b3ncloud.net/article/46447 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-121144 - Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile application https://b3ncloud.net/article/46448 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-104799 - Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters https://b3ncloud.net/article/46425 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 Chrome 157 fixes 213 security issues, including 7 critical flaws https://b3ncloud.net/article/46426 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CISA flags WordPress RCE flaw as actively exploited in attacks https://b3ncloud.net/article/46450 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-65555 - WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability https://b3ncloud.net/article/46449 2026-11-04 weekly 0.7 B3ncloud.net de 2026-11-04 CVE-2026-119481 - WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability