https://b3ncloud.net/ daily 1.0 2026-10-02 https://b3ncloud.net/news hourly 0.9 2026-10-02 https://b3ncloud.net/tools monthly 0.8 2026-10-02 https://b3ncloud.net/tools/ip-lookup monthly 0.7 2026-10-02 https://b3ncloud.net/tools/dns-lookup monthly 0.7 2026-10-02 https://b3ncloud.net/tools/ip-info monthly 0.7 2026-10-02 https://b3ncloud.net/tools/url-parser monthly 0.6 2026-10-02 https://b3ncloud.net/tools/http-status-codes monthly 0.6 2026-10-02 https://b3ncloud.net/tools/common-ports monthly 0.6 2026-10-02 https://b3ncloud.net/tools/ip-range-calculator monthly 0.6 2026-10-02 https://b3ncloud.net/tools/dns-leak-test monthly 0.7 2026-10-02 https://b3ncloud.net/search daily 0.7 2026-10-02 https://b3ncloud.net/breach-check monthly 0.7 2026-10-02 https://b3ncloud.net/leak-monitor monthly 0.7 2026-10-02 https://b3ncloud.net/phishing-check monthly 0.7 2026-10-02 https://b3ncloud.net/ioc monthly 0.7 2026-10-02 https://b3ncloud.net/ssl monthly 0.7 2026-10-02 https://b3ncloud.net/header monthly 0.7 2026-10-02 https://b3ncloud.net/cve-search weekly 0.8 2026-10-02 https://b3ncloud.net/vulnerability-check weekly 0.7 2026-10-02 https://b3ncloud.net/mitre weekly 0.7 2026-10-02 https://b3ncloud.net/intel daily 0.8 2026-10-02 https://b3ncloud.net/cheatsheets monthly 0.7 2026-10-02 https://b3ncloud.net/dkb weekly 0.7 2026-10-02 https://b3ncloud.net/security-checklist monthly 0.6 2026-10-02 https://b3ncloud.net/incident-response monthly 0.6 2026-10-02 https://b3ncloud.net/firewall-rules monthly 0.6 2026-10-02 https://b3ncloud.net/regex monthly 0.6 2026-10-02 https://b3ncloud.net/cron monthly 0.6 2026-10-02 https://b3ncloud.net/log-analyzer monthly 0.6 2026-10-02 https://b3ncloud.net/subnet monthly 0.6 2026-10-02 https://b3ncloud.net/troubleshooting monthly 0.6 2026-10-02 https://b3ncloud.net/stats daily 0.7 2026-10-02 https://b3ncloud.net/updates weekly 0.5 2026-10-02 https://b3ncloud.net/updates/feed.xml hourly 0.6 2026-10-02 https://b3ncloud.net/feed.xml hourly 0.6 2026-10-02 https://b3ncloud.net/cves/feed.xml hourly 0.6 2026-10-02 https://b3ncloud.net/impressum yearly 0.2 2026-10-02 https://b3ncloud.net/datenschutz yearly 0.2 2026-10-02 https://b3ncloud.net/article/41626 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats https://b3ncloud.net/article/41627 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 AI Agents Attempt SQL Injection While Searching Government Data https://b3ncloud.net/article/41628 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel https://b3ncloud.net/article/41629 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 The EDR blind spot: 3 ways browser attacks evade endpoint telemetry https://b3ncloud.net/article/41630 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CISOs sollen KI-Sicherheit ohne zusätzliche Ressourcen managen https://b3ncloud.net/article/41631 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials https://b3ncloud.net/article/41596 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor https://b3ncloud.net/article/41597 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks https://b3ncloud.net/article/41598 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server https://b3ncloud.net/article/41599 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63772 - Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count https://b3ncloud.net/article/41600 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66055 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) https://b3ncloud.net/article/41601 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials https://b3ncloud.net/article/41602 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Dell asks admins to patch max severity CSM flaws as soon as possible https://b3ncloud.net/article/41603 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66081 - Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages https://b3ncloud.net/article/41604 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66837 - Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length https://b3ncloud.net/article/41605 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66858 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) https://b3ncloud.net/article/41606 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-66859 - Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route https://b3ncloud.net/article/41607 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-83632 - Apache Thrift: C++ THttpTransport grows its line buffer without bound https://b3ncloud.net/article/41608 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-83663 - Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) https://b3ncloud.net/article/41612 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94653 - Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) https://b3ncloud.net/article/41611 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96288 - Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) https://b3ncloud.net/article/41610 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96292 - Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) https://b3ncloud.net/article/41609 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96294 - Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection https://b3ncloud.net/article/41616 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94636 - Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up https://b3ncloud.net/article/41615 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94637 - Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame https://b3ncloud.net/article/41614 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94646 - Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) https://b3ncloud.net/article/41613 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94648 - Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound https://b3ncloud.net/article/41619 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86537 - Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service https://b3ncloud.net/article/41618 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-87117 - Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec https://b3ncloud.net/article/41617 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-90440 - Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service https://b3ncloud.net/article/41622 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82458 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available https://b3ncloud.net/article/41621 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-82459 - Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process https://b3ncloud.net/article/41620 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86535 - Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely https://b3ncloud.net/article/41624 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104471 - YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import https://b3ncloud.net/article/41623 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104472 - YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler https://b3ncloud.net/article/41562 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access https://b3ncloud.net/article/41563 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104286 https://b3ncloud.net/article/41564 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks https://b3ncloud.net/article/41565 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Crypto Scammers Hijack Microsoft’s Official X Account https://b3ncloud.net/article/41566 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak https://b3ncloud.net/article/41567 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report https://b3ncloud.net/article/41568 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users https://b3ncloud.net/article/41569 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 In Rare Move, Alleged Iranian State Hacker Extradited to US https://b3ncloud.net/article/41559 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features https://b3ncloud.net/article/41570 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-96990 - Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound https://b3ncloud.net/article/41560 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Digiwin EasyFlow .NET: Zwei kritische Lücken erlauben Codeausführung und Passwortdiebstahl https://b3ncloud.net/article/41571 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94642 - Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception https://b3ncloud.net/article/41572 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94644 - Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound https://b3ncloud.net/article/41573 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94645 - Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound https://b3ncloud.net/article/41574 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94650 - Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) https://b3ncloud.net/article/41575 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94651 - Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error https://b3ncloud.net/article/41576 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-85493 - Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) https://b3ncloud.net/article/41577 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-85494 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language) https://b3ncloud.net/article/41578 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-91135 - Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) https://b3ncloud.net/article/41579 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86326 - Protocol Gateway Improper Cryptographic Signature Verification Vulnerability https://b3ncloud.net/article/41580 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-91137 - Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements https://b3ncloud.net/article/41581 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86325 - Protocol Gateway Account Management Interface Stack-Based Buffer Overflow https://b3ncloud.net/article/41585 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94541 - WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter https://b3ncloud.net/article/41584 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94634 - Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default https://b3ncloud.net/article/41583 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94635 - Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name https://b3ncloud.net/article/41582 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94639 - Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) https://b3ncloud.net/article/41586 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-80298 - SQL Injection in HAVELSAN's Sef - AI Chatbot Platform https://b3ncloud.net/article/41587 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93925 - Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id https://b3ncloud.net/article/41561 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Fortinet warnt vor aktiv ausgenutzter Path-Traversal-Lücke mit CVSS 9,8 https://b3ncloud.net/article/41588 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93926 - Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path https://b3ncloud.net/article/41589 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-94633 - Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length https://b3ncloud.net/article/41540 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 „Immutability-Washing“ https://b3ncloud.net/article/41541 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA https://b3ncloud.net/article/41542 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data https://b3ncloud.net/article/41543 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks https://b3ncloud.net/article/41544 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Microsoft’s X account hacked in crypto pump-and-dump scheme https://b3ncloud.net/article/41545 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Kiteworks Patches 126 Vulnerabilities in Massive Security Update https://b3ncloud.net/article/41534 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Cloudflare Launches Free Certificate Authority for the Whole Internet https://b3ncloud.net/article/41590 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 1Password 7 ohne Cloud: Mac-Update streicht Browser-Plug-in https://b3ncloud.net/article/41535 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 OpenAI Blocks 15,000-User Campaign Trying to Extract Hidden AI Reasoning https://b3ncloud.net/article/41536 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 AI Agents Aimed SQL Injection at US and Canadian Government Sites https://b3ncloud.net/article/41546 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-97637 - JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response https://b3ncloud.net/article/41550 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63573 - Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap https://b3ncloud.net/article/41549 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63574 - Unbounded allocation from OpenPGP signature and user attribute subpacket lengths https://b3ncloud.net/article/41548 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63576 - URI name constraints checked against a mis-parsed host https://b3ncloud.net/article/41547 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63577 - Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix https://b3ncloud.net/article/41553 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-17507 - MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender https://b3ncloud.net/article/41552 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-18036 - NTRU leaks private key information by reducing secret values with a non-constant-time integer division https://b3ncloud.net/article/41551 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63571 - Attribute certificate path validation does not verify the attribute certificate's signature https://b3ncloud.net/article/41558 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103600 - Unbounded ASN.1 nesting depth causes process-terminating stack overflow https://b3ncloud.net/article/41557 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103601 - CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check https://b3ncloud.net/article/41556 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103602 - Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts https://b3ncloud.net/article/41555 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103603 - Unbounded HSS public key level count allows huge array allocation during signature verification https://b3ncloud.net/article/41554 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103604 - Quadratic-time escaping when converting X.509 distinguished names to strings https://b3ncloud.net/article/41537 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action https://b3ncloud.net/article/41538 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools https://b3ncloud.net/article/41539 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 OpenAI nimmt Ukraine in KI-Cyberabwehr-Programm auf https://b3ncloud.net/article/41516 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Treasury Sanctions Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in Losses https://b3ncloud.net/article/41517 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63569 - MTI/A0 DHAgreement does not validate the peer's ephemeral value https://b3ncloud.net/article/41519 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Cyberangriffe in der EU: Informationslücken erschweren Bekämpfung https://b3ncloud.net/article/41518 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Keeper Security und Sailpoint automatisieren privilegierte Zugriffe https://b3ncloud.net/article/41520 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63568 - Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion https://b3ncloud.net/article/41521 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63567 - IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) https://b3ncloud.net/article/41522 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63566 - DTLS handshake reassembler allocates buffer from unchecked 24-bit length https://b3ncloud.net/article/41523 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-16001 - IesEngine stream-mode MAC forgery via length-dependent KDF split https://b3ncloud.net/article/41524 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-16000 - KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used https://b3ncloud.net/article/41525 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-15999 - AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication https://b3ncloud.net/article/41526 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Angriffe auf FortiMail-Zero-Day-Lücke beobachtet https://b3ncloud.net/article/41512 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 USN-8816-4: Linux kernel (GKE) vulnerabilities https://b3ncloud.net/article/41527 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 USN-8818-6: Linux kernel (FIPS) vulnerabilities https://b3ncloud.net/article/41528 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93029 - WHM Stored Cross-Site Scripting https://b3ncloud.net/article/41529 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93697 - WHM Stored Cross-Site Scripting Vulnerability https://b3ncloud.net/article/41530 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-93698 - Multilang Adminbin Command Injection https://b3ncloud.net/article/41513 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2024-58388 https://b3ncloud.net/article/41531 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-92820 - Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload https://b3ncloud.net/article/41532 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-15897 - Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login https://b3ncloud.net/article/41533 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-15896 - Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter https://b3ncloud.net/article/41514 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/41515 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes https://b3ncloud.net/article/41507 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Angreifer nutzen SharePoint-Schwach­stelle zur Codeausführung aus https://b3ncloud.net/article/41508 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-19660 - Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter https://b3ncloud.net/article/41509 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-14378 - DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow https://b3ncloud.net/article/41503 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63692 https://b3ncloud.net/article/41502 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-63688 https://b3ncloud.net/article/41504 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Auslegungssache 169: Datenschutz in Videokonferenzen https://b3ncloud.net/article/41505 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Multiple Apache HTTP Server Vulnerabilities Could Enable Code Execution Attacks https://b3ncloud.net/article/41501 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Critical Fortinet FortiMail 0-Day Vulnerability Actively Exploited in Attacks https://b3ncloud.net/article/41506 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-104480 - Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership https://b3ncloud.net/article/41511 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Geschwindigkeit als Gefahr: Neue Security-Herausforderungen https://b3ncloud.net/article/41510 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 Netzwerkzugangskontrolle: NAC-Grundlagen und -Standards https://b3ncloud.net/article/41497 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86345 - 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result https://b3ncloud.net/article/41496 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-92370 https://b3ncloud.net/article/41495 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-86131 https://b3ncloud.net/article/41500 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103764 - Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport https://b3ncloud.net/article/41499 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103765 - Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server https://b3ncloud.net/article/41498 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 CVE-2026-103766 - ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter https://b3ncloud.net/article/41591 2026-10-02 weekly 0.7 B3ncloud.net de 2026-10-02 DSA-6538-1 redis - security update https://b3ncloud.net/article/41485 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103761 - Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue https://b3ncloud.net/article/41486 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103760 - Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write https://b3ncloud.net/article/41487 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Fortinet warns of critical FortiMail flaw exploited in zero-day attacks https://b3ncloud.net/article/41488 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-71452 - Johnson Controls EasyIO FS32 OS Command Injection https://b3ncloud.net/article/41489 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-71449 - Johnson Controls EasyIO FS32 Hard-coded Cryptographic Key Vulnerability https://b3ncloud.net/article/41490 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-18397 - SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability https://b3ncloud.net/article/41492 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104051 - PictShare < 3.7.1 Sensitive Information Disclosure via info API https://b3ncloud.net/article/41491 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104356 - PictShare < 3.7.1 Predictable Delete Code via rand() https://b3ncloud.net/article/41493 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-96780 - figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width https://b3ncloud.net/article/41494 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104020 - Uncontrolled recursion in the Ion reader in Amazon Ion Python https://b3ncloud.net/article/41467 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Autonomous AI agents tried to hack US, Canadian government websites https://b3ncloud.net/article/41469 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-70650 - GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content https://b3ncloud.net/article/41468 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-71542 - GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php https://b3ncloud.net/article/41471 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-56660 - GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction https://b3ncloud.net/article/41470 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-56662 - GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request https://b3ncloud.net/article/41473 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-53953 - GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover https://b3ncloud.net/article/41472 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-54049 - Sakai Conversations has a Stored XSS Issue https://b3ncloud.net/article/41475 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability https://b3ncloud.net/article/41474 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-14984 - Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41476 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103484 - pgvector buffer overflow in IVFFlat index build https://b3ncloud.net/article/41478 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102628 - Cadmos LTI exposure of sensitive information via debug mode https://b3ncloud.net/article/41477 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102667 - Joyland AI WebView command injection https://b3ncloud.net/article/41479 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102514 - Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive https://b3ncloud.net/article/41480 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55396 - Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41481 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55395 - Hardcoded Passwords in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41482 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55393 - Local File Inclusion in Teledyne FLIR Robots running Aware2 https://b3ncloud.net/article/41454 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Microsoft says threat actors are ahead in the early AI race https://b3ncloud.net/article/41483 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104057 - Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler https://b3ncloud.net/article/41455 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55230 - Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character https://b3ncloud.net/article/41456 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104059 - Lektor 3.3.14 CSRF via Admin API Endpoints https://b3ncloud.net/article/41457 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-97662 - Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace https://b3ncloud.net/article/41458 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-104018 - VxWorks 7 improper privilege management https://b3ncloud.net/article/41461 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102294 - Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration https://b3ncloud.net/article/41460 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102369 - Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200 https://b3ncloud.net/article/41459 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103922 - Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path https://b3ncloud.net/article/41462 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2023-54404 - Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation https://b3ncloud.net/article/41452 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Operation KillSwitch: Police Dismantle KillSec Ransomware Group https://b3ncloud.net/article/41463 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-55083 - DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE) https://b3ncloud.net/article/41453 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks https://b3ncloud.net/article/41464 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-73975 - djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples https://b3ncloud.net/article/41465 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-13043 - WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access https://b3ncloud.net/article/41466 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-101888 - Prime Mover < 2.2.1 Zip Slip Path Traversal File Write https://b3ncloud.net/article/41439 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers https://b3ncloud.net/article/41484 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8863-1: GStreamer Good Plugins vulnerabilities https://b3ncloud.net/article/41440 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories https://b3ncloud.net/article/41442 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-96659 - Foreman: excessive permissions for viewer role on preview https://b3ncloud.net/article/41441 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-96658 - Foreman: safemode bypass leading to rce https://b3ncloud.net/article/41443 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12541 - Foreman: command injection in foreman-rake database tasks https://b3ncloud.net/article/41444 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12540 - Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter https://b3ncloud.net/article/41445 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12405 - Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter https://b3ncloud.net/article/41446 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download) https://b3ncloud.net/article/41447 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-12627 - Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability https://b3ncloud.net/article/41448 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-101322 - Eclipse BaSyx AAS Web UI Authorization Header Credential Leak https://b3ncloud.net/article/41449 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-14316 - Heap buffer overflow in boks_sshd revoked-key error handling https://b3ncloud.net/article/41437 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365 https://b3ncloud.net/article/41438 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Ransomwaregruppe Killsec ausgehoben: Teenager als Hauptverdächtiger https://b3ncloud.net/article/41425 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled https://b3ncloud.net/article/41450 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2024-58388 - Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html https://b3ncloud.net/article/41426 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor https://b3ncloud.net/article/41427 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-79898 - Fortra BoKS Manager crlserver command injection vulnerability https://b3ncloud.net/article/41428 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts https://b3ncloud.net/article/41429 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory https://b3ncloud.net/article/41430 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103068 - WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerability https://b3ncloud.net/article/41431 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-97284 - WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability https://b3ncloud.net/article/41432 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-95588 - WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability https://b3ncloud.net/article/41433 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-62071 - WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability https://b3ncloud.net/article/41434 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103752 - WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability https://b3ncloud.net/article/41414 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass https://b3ncloud.net/article/41415 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Police dismantle KillSec ransomware gang allegedly led by 16-year-old https://b3ncloud.net/article/41395 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 KI-gestütztes Reverse Engineering: Thales erweitert Sentinel Envelope um zusätzlichen Softwareschutz https://b3ncloud.net/article/41435 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-79901 - Predictable Active Directory service-account passwords in BoKS Manager https://b3ncloud.net/article/41436 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-66246 - HCL iControl is affected by multiple security vulnerabilities https://b3ncloud.net/article/41416 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader https://b3ncloud.net/article/41417 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators https://b3ncloud.net/article/41418 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 The Day-One Hole in Zero Trust Architecture https://b3ncloud.net/article/41419 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Kiteworks patches max severity code injection vulnerability https://b3ncloud.net/article/41451 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Teen hacker arrested amid KillSec cyber gang takedown https://b3ncloud.net/article/41420 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor https://b3ncloud.net/article/41421 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-74865: Kritische SOGo-Schwachstelle erlaubt Kontoübernahme ohne gültiges Passwort https://b3ncloud.net/article/41396 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-76504 https://b3ncloud.net/article/41397 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers Abuse Microsoft Defender Exclusions to Hide Malware From Antivirus Scans https://b3ncloud.net/article/41398 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 AI Has Changed Attack Speed, Not Security Fundamentals https://b3ncloud.net/article/41399 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Node.js ImageResponse Implementation Vulnerability Enables Remote Code Execution https://b3ncloud.net/article/41400 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure https://b3ncloud.net/article/41422 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8862-1: libXpm vulnerability https://b3ncloud.net/article/41401 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Axios HTTP/2 Flaws Enable SSRF Control Bypass and Node.js Denial of Service https://b3ncloud.net/article/41402 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-102379 - WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability https://b3ncloud.net/article/41403 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103338 - WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability https://b3ncloud.net/article/41404 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103067 - WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/41405 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-94250 - Apache APISIX: Batch response aggregation can exhaust worker memory https://b3ncloud.net/article/41367 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zscaler Ransomware Report 2026: 896 Terabyte Datendiebstahl, KI-Angriffe und Führungskräfte im Fokus https://b3ncloud.net/article/41423 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8861-1: OpenSSL vulnerabilities https://b3ncloud.net/article/41376 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access https://b3ncloud.net/article/41625 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Convincing Free Mobile phishing emails appear after data breach https://b3ncloud.net/article/41377 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8860-1: OpenStack Designate vulnerability https://b3ncloud.net/article/41406 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103757 - Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation https://b3ncloud.net/article/41407 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103286 - Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications https://b3ncloud.net/article/41408 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103278 - Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe https://b3ncloud.net/article/41410 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103271 - Ghost 4.0.0 before 6.63.0 Restricted Content Bypass https://b3ncloud.net/article/41409 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103272 - Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API https://b3ncloud.net/article/41412 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103262 - Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient https://b3ncloud.net/article/41411 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103263 - Tornado before 6.5.9 StaticFileHandler Path Traversal via Symlink https://b3ncloud.net/article/41413 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103259 - n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials https://b3ncloud.net/article/41378 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Reverse-Proxy fürs Homelab: Pangolin 1.24 bringt Selbstbau-VPN https://b3ncloud.net/article/41368 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Malwarebytes earns another Top Product award in independent testing https://b3ncloud.net/article/41369 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Treasury Blacklists Most-Wanted ATM Malware Developer and His Network https://b3ncloud.net/article/41370 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Nvidia GPU Display Treiber: Mehrere Schwachstellen https://b3ncloud.net/article/41379 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-88789 - Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening https://b3ncloud.net/article/41371 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Pentagon breach exposes Social Security numbers and military records of millions https://b3ncloud.net/article/41424 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 USN-8857-1: KCoreAddons vulnerability https://b3ncloud.net/article/41372 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Zammad Zero-Days Exploited in AI-Powered DIVD Hack https://b3ncloud.net/article/41373 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates https://b3ncloud.net/article/41380 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103758 - Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route https://b3ncloud.net/article/41381 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103292 - Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head https://b3ncloud.net/article/41382 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103283 - Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling https://b3ncloud.net/article/41383 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103277 - Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed https://b3ncloud.net/article/41384 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103268 - Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset https://b3ncloud.net/article/41385 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103264 - Fleet before 4.87.0 Authentication Bypass via Device Identifiers https://b3ncloud.net/article/41386 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103255 - n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase https://b3ncloud.net/article/41387 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103253 - n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table https://b3ncloud.net/article/41388 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103250 - n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory https://b3ncloud.net/article/41389 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103248 - n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase https://b3ncloud.net/article/41390 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103247 - n8n before 1.123.80 Credential Tampering via Duplicate Node IDs https://b3ncloud.net/article/41391 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103244 - ground-station before 0.8.0 Authentication Bypass via setup.restore https://b3ncloud.net/article/41393 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-64949 - Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager https://b3ncloud.net/article/41392 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-64950 - Stored Cross-Site Scripting via Directory Name in File Manager Create Directory https://b3ncloud.net/article/41394 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103493 - JetBrains YouTrack Stored Cross-Site Scripting https://b3ncloud.net/article/41374 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 New PS5 Relapse Exploit Breaks Into the Kernel Across Years of Firmware Releases https://b3ncloud.net/article/41353 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 ModSecurity Vulnerabilities Let Attackers Bypass Web Application Firewall Protections https://b3ncloud.net/article/41354 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Hackers stole Pentagon personnel records of over 3 million people https://b3ncloud.net/article/41355 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 500,000 Active Credentials Left Exposed on GitHub https://b3ncloud.net/article/41375 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 The Secrets of the US Spyware King https://b3ncloud.net/article/41356 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root https://b3ncloud.net/article/41357 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Die Anatomie einer Pre-Auth-RCE https://b3ncloud.net/article/41347 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed https://b3ncloud.net/article/41358 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Treiber-Lücken gefährden Linux- und Windows-PCs mit Nvidia-GPU https://b3ncloud.net/article/41359 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog https://b3ncloud.net/article/41360 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-95687 - WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint https://b3ncloud.net/article/41361 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-15983 - Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter https://b3ncloud.net/article/41348 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability https://b3ncloud.net/article/41349 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session https://b3ncloud.net/article/41362 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-75957 - Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter https://b3ncloud.net/article/41364 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-15989 - Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter https://b3ncloud.net/article/41363 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-19807 - ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP Tool https://b3ncloud.net/article/41350 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 New 2CLoader Malware Evades Security Tools to Deploy Vidar and Remus Stealers https://b3ncloud.net/article/41365 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103655 - MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period https://b3ncloud.net/article/41351 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Attacken auf IT-Verwaltungsplattform HPE OneView möglich https://b3ncloud.net/article/41366 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds https://b3ncloud.net/article/41352 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders https://b3ncloud.net/article/41329 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 TU Graz entdeckt Sicherheitsrisiken in File Notifications von Windows, Linux, Android und macOS https://b3ncloud.net/article/41341 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-77185: Kritischer Authentifizierungs-Bypass in Apache MINA SSHD https://b3ncloud.net/article/41342 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild https://b3ncloud.net/article/41343 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 WatchGuard schließt teils kritische Lücken in Fireware OS https://b3ncloud.net/article/41344 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2025-41753 - Path traversal in dynamically created BACnet File Objects https://b3ncloud.net/article/41330 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-80275 - Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint https://b3ncloud.net/article/41345 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path https://b3ncloud.net/article/41331 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft https://b3ncloud.net/article/41333 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82829 - Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process https://b3ncloud.net/article/41332 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-92966 - Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field https://b3ncloud.net/article/41338 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82824 - Path traversal may allow arbitrary files to be viewed, created, modified, or deleted https://b3ncloud.net/article/41337 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82825 - Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed https://b3ncloud.net/article/41336 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82826 - Authentication information or sensitive data may be intercepted in transit https://b3ncloud.net/article/41335 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82827 - A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens https://b3ncloud.net/article/41334 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-82828 - Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges https://b3ncloud.net/article/41340 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-76142 - Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface https://b3ncloud.net/article/41339 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-76146 - Genians, Inc Genian SSL PNS OS Command Injection https://b3ncloud.net/article/41324 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Angriffe aus dem lokalen Netzwerk auf Zyxel-Switches https://b3ncloud.net/article/41325 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access https://b3ncloud.net/article/41326 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs https://b3ncloud.net/article/41323 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-13313 - ASUS Router Active Debug Code Command Injection Vulnerability https://b3ncloud.net/article/41322 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-14157 - ASUS Router Format String Vulnerability https://b3ncloud.net/article/41321 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2025-14564 https://b3ncloud.net/article/41328 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Cybersicherheit: Die größten Herausforderungen für die IT https://b3ncloud.net/article/41327 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 Windows-Update-Fehler analysieren und beheben https://b3ncloud.net/article/41595 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6534-1 webkit2gtk - security update https://b3ncloud.net/article/41594 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6535-1 chromium - security update https://b3ncloud.net/article/41593 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6536-1 thunderbird - security update https://b3ncloud.net/article/41592 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 DSA-6537-1 libpng1.6 - security update https://b3ncloud.net/article/41319 2026-10-01 weekly 0.7 B3ncloud.net de 2026-10-01 CVE-2026-103591 - DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file https://b3ncloud.net/article/41298 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101283 - iperf3 Heap Buffer Overflow https://b3ncloud.net/article/41299 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-51570 - ModelScope AgentScope Path Traversal Vulnerability https://b3ncloud.net/article/41303 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102997 - pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) https://b3ncloud.net/article/41302 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102998 - pypdf: Possible long runtimes when generating appearance streams https://b3ncloud.net/article/41301 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102999 - pypdf: Possible long runtimes with large amount of embedded files https://b3ncloud.net/article/41300 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103000 - pypdf: Possible large memory usage when retrieving alphabetical page labels https://b3ncloud.net/article/41305 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102995 - pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) https://b3ncloud.net/article/41304 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102996 - pypdf: Possible large memory usage when parsing font data https://b3ncloud.net/article/41307 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102147 - Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) https://b3ncloud.net/article/41306 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102149 - Kiteworks Email Protection Gateway Improper Access Control https://b3ncloud.net/article/41285 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-86950 https://b3ncloud.net/article/41284 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96760 https://b3ncloud.net/article/41283 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-28802 https://b3ncloud.net/article/41311 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102120 - Kiteworks Core OS Command Injection https://b3ncloud.net/article/41310 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102121 - Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor https://b3ncloud.net/article/41309 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102125 - Kiteworks Core Sandbox Escape https://b3ncloud.net/article/41308 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102126 - Kiteworks Core Stored Cross-site Scripting (XSS) https://b3ncloud.net/article/41312 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102115 - Kiteworks Core Authentication Bypass in the Password Reset Workflow https://b3ncloud.net/article/41314 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102105 - Kiteworks Email Protection Gateway server-side request forgery https://b3ncloud.net/article/41313 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102106 - Kiteworks Email Protection Gateway improper authentication https://b3ncloud.net/article/41316 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102100 - Kiteworks Core stored XSS https://b3ncloud.net/article/41315 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102101 - Kiteworks Core deserialization of untrusted data https://b3ncloud.net/article/41317 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102092 - Kiteworks Core stored XSS https://b3ncloud.net/article/41286 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Russian state hackers use new RedFlick technique to push malware https://b3ncloud.net/article/41287 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2023-54402 - iDocView SSRF via /doc/upload Endpoint Hardcoded Token https://b3ncloud.net/article/41288 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Stadt Wien entdeckt Einbruch in Online-Speicher https://b3ncloud.net/article/41289 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103547 - OpenBSD ldapd Authentication Correlation Vulnerability https://b3ncloud.net/article/41290 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102994 - pypdf: Possible long runtimes/large memory usage when parsing indirect objects https://b3ncloud.net/article/41292 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102992 - piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env https://b3ncloud.net/article/41291 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102993 - pypdf: Possible large memory usage when retrieving Roman page labels https://b3ncloud.net/article/41293 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102990 - basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking) https://b3ncloud.net/article/41294 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101885 - ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path https://b3ncloud.net/article/41295 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101882 - OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set https://b3ncloud.net/article/41296 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101880 - OpenClaw Windows Node before 2026.7.1 Authorization Bypass https://b3ncloud.net/article/41278 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-27962 https://b3ncloud.net/article/41279 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 DIVD says Zammad zero-days enabled AI-driven network breach https://b3ncloud.net/article/41280 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 WatchGuard fixes critical Fireware OS flaw allowing remote code execution https://b3ncloud.net/article/41255 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-101043 https://b3ncloud.net/article/41256 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-97291 - WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability https://b3ncloud.net/article/41257 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-87004 - Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification https://b3ncloud.net/article/41260 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55094 - Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`) https://b3ncloud.net/article/41259 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55107 - Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service) https://b3ncloud.net/article/41258 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55224 - MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall https://b3ncloud.net/article/41265 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103471 - restbed through 5.0.0 Denial of Service via Unbounded Header Buffering https://b3ncloud.net/article/41264 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103472 - restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering https://b3ncloud.net/article/41263 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103473 - Deno 2.7.0 through 2.9.7 Command Injection via node:child_process https://b3ncloud.net/article/41262 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103474 - yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE https://b3ncloud.net/article/41261 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103475 - yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure https://b3ncloud.net/article/41266 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102377 - WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability https://b3ncloud.net/article/41267 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100512 - WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability https://b3ncloud.net/article/41249 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Over 543,000 valid credentials exposed in public GitHub repositories https://b3ncloud.net/article/41269 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-62308 - Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint https://b3ncloud.net/article/41268 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-75969 - PTZOptics Missing Authentication in Firmware Upload https://b3ncloud.net/article/41270 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55494 - Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset https://b3ncloud.net/article/41273 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-46711 - Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network https://b3ncloud.net/article/41272 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55176 - Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token https://b3ncloud.net/article/41271 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-55181 - Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false https://b3ncloud.net/article/41274 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-19445 - Use-after-free of a server-side SSLContext when sni_callback switches contexts https://b3ncloud.net/article/41276 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102489 - Undisclosed RCE in Zammad v6.3 and higher https://b3ncloud.net/article/41275 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102490 - Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha https://b3ncloud.net/article/41250 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS https://b3ncloud.net/article/41251 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux https://b3ncloud.net/article/41229 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells https://b3ncloud.net/article/41252 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets https://b3ncloud.net/article/41253 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8858-1: Authen::SASL vulnerability https://b3ncloud.net/article/41297 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8859-1: ImageMagick vulnerabilities https://b3ncloud.net/article/41254 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks https://b3ncloud.net/article/41230 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Russian Hackers Target 100+ Organizations With New RedFlick Phishing Attack https://b3ncloud.net/article/41231 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103470 - Internet2 Grouper Privilege Escalation https://b3ncloud.net/article/41232 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103432 - APCUPSD Stack-Based Buffer Overflow https://b3ncloud.net/article/41234 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102427 - Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 https://b3ncloud.net/article/41233 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-61500 https://b3ncloud.net/article/41235 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100277 - JetBrains YouTrack Notification Signature Replay Account Takeover https://b3ncloud.net/article/41236 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100273 - JetBrains YouTrack Authorization Bypass and Arbitrary Code Execution https://b3ncloud.net/article/41237 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100255 - JetBrains TeamCity Administrator Account Takeover via Password Reset Vulnerability https://b3ncloud.net/article/41239 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100253 - JetBrains TeamCity Sandbox Escape Leading to Remote Code Execution https://b3ncloud.net/article/41238 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-100254 - JetBrains TeamCity CRLF Injection Remote Code Execution https://b3ncloud.net/article/41240 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Phishing Response: 3 Steps SOC Teams Can Take to Investigate Threats Faster https://b3ncloud.net/article/41346 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8855-1: GStreamer Bad Plugins vulnerability https://b3ncloud.net/article/41241 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8856-1: Kdenlive, MLT vulnerability https://b3ncloud.net/article/41318 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8845-1: GVfs vulnerabilities https://b3ncloud.net/article/41194 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS https://b3ncloud.net/article/41195 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Hackers steal protective order and foster care records from Arizona courts https://b3ncloud.net/article/41196 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager https://b3ncloud.net/article/41242 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-76570 - Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1 https://b3ncloud.net/article/41243 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-47097 - AJA HELO Plus < 2.1.7 Static AES Passphrase Information Disclosure via /diags https://b3ncloud.net/article/41244 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103398 - OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path https://b3ncloud.net/article/41245 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103395 - LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service https://b3ncloud.net/article/41246 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103270 - LightLLM through 1.2.0 Missing Authentication on RL Control Routes https://b3ncloud.net/article/41247 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102984 - Astro: Malformed port in the Host header can crash the Node adapter https://b3ncloud.net/article/41197 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102676 https://b3ncloud.net/article/41198 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Supply Chain Attacks Turn Developer Machines Into Gateways for Cloud Breaches https://b3ncloud.net/article/41199 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures https://b3ncloud.net/article/41200 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Cisco warns of new SD-WAN zero-day exploited in attacks https://b3ncloud.net/article/41201 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Hackers Disguise Remote Access Tools as Zoom and PDF Installers to Take Over PCs https://b3ncloud.net/article/41183 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Jetzt patchen: Angreifer umgehen Anmeldung bei Cisco Catalyst SD-WAN Manager https://b3ncloud.net/article/41202 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-93903 - LiteSpeed Web Server Open Redirect Vulnerability https://b3ncloud.net/article/41203 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-82307 - Multiple Vulnerabilities in Dolusoft Software's SOPLOG https://b3ncloud.net/article/41204 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-18782 - SQL Injection in Trex Digital Manufacturing's Trex MES https://b3ncloud.net/article/41205 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-18783 - Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES https://b3ncloud.net/article/41184 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Google: AI Is Changing the Pace and Profile of Vulnerability Discovery https://b3ncloud.net/article/41186 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8817-3: Linux kernel (AWS) vulnerabilities https://b3ncloud.net/article/41185 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8816-3: Linux kernel (Oracle) vulnerabilities https://b3ncloud.net/article/41187 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8818-5: Linux kernel (NVIDIA Tegra) vulnerabilities https://b3ncloud.net/article/41188 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 AI's Third Wave: Coworkers Break the Security Model That Worked for Agents https://b3ncloud.net/article/41206 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 https://b3ncloud.net/article/41189 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 ShinyHunters bekennt sich zu Attacke auf FBI-Jobportal https://b3ncloud.net/article/41190 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Hackers Turned a PaperCut Print Server Into a Path to the Domain Controller https://b3ncloud.net/article/41191 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments https://b3ncloud.net/article/41207 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-97293 - WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability https://b3ncloud.net/article/41209 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-97274 - WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability https://b3ncloud.net/article/41208 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-97287 - WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability https://b3ncloud.net/article/41210 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-97248 - WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/41212 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96837 - WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability https://b3ncloud.net/article/41211 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96838 - WordPress Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability https://b3ncloud.net/article/41213 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96831 - WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability https://b3ncloud.net/article/41215 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96817 - WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability https://b3ncloud.net/article/41214 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96822 - WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability https://b3ncloud.net/article/41216 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96350 - WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability https://b3ncloud.net/article/41217 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-96349 - WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability https://b3ncloud.net/article/41218 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-95531 - WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability https://b3ncloud.net/article/41220 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94678 - WordPress Go Live Update Urls plugin <= 7.0.8 - PHP Object Injection vulnerability https://b3ncloud.net/article/41219 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94683 - WordPress DesignSetGo plugin <= 2.8.0 - PHP Object Injection vulnerability https://b3ncloud.net/article/41221 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94389 - WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability https://b3ncloud.net/article/41222 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94177 - WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability https://b3ncloud.net/article/41224 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94115 - WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability https://b3ncloud.net/article/41223 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94121 - WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability https://b3ncloud.net/article/41225 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94076 - WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.5 - PHP Object Injection vulnerability https://b3ncloud.net/article/41226 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-93621 - WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability https://b3ncloud.net/article/41227 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-76504 - Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability https://b3ncloud.net/article/41174 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 WatchGuard Patches Critical Fireware OS Code Injection Vulnerability https://b3ncloud.net/article/41228 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8854-1: OpenStack Keystone vulnerabilities https://b3ncloud.net/article/41192 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8853-1: OpenSBI vulnerability https://b3ncloud.net/article/41175 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Hackers Broke Into Microsoft 365 Through Forgotten Accounts Nobody Was Watching https://b3ncloud.net/article/41176 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Datenleck beim Pentagon: Millionen Militärangehörige betroffen https://b3ncloud.net/article/41177 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 TeamViewer urges users to patch severe flaws “as soon as possible” https://b3ncloud.net/article/41178 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103321 - MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image https://b3ncloud.net/article/41179 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-10739 - Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation https://b3ncloud.net/article/41180 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Chrome, Firefox Updates Patch Over 100 Vulnerabilities https://b3ncloud.net/article/41181 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-74865 - Authentication Bypass in sogo_yhn https://b3ncloud.net/article/41193 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8852-1: OpenVPN vulnerabilities https://b3ncloud.net/article/41168 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Moodle: Mehrere Schwachstellen https://b3ncloud.net/article/41277 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Medela - 423,947 breached accounts https://b3ncloud.net/article/41169 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit https://b3ncloud.net/article/41182 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-76992 - Uncontrolled Memory Allocation in CODESYS Gateway Client https://b3ncloud.net/article/41170 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Hackers Turn One Compromised Account Into Access to Azure DevOps and Kubernetes https://b3ncloud.net/article/41171 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Bitget hacked via zero-day in third-party security products https://b3ncloud.net/article/41172 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks https://b3ncloud.net/article/41146 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 PrestaShop gmfeed: Kritische RCE-Lücke in Google-Merchant-Center-Modul geschlossen https://b3ncloud.net/article/41147 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Security Teams Can Now Monitor Claude Chats, Files and AI Agent Activity https://b3ncloud.net/article/41173 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access https://b3ncloud.net/article/41134 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Wenn KI-Agenten zu Insidern werden: Die unterschätzte Gefahr autonomer Systeme https://b3ncloud.net/article/41148 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Dayforce Payroll: Kritische Schwachstellen erlauben SQL-Injection und Path Traversal ohne Anmeldung https://b3ncloud.net/article/41149 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Mozilla Firefox ESR und Firefox: Mehrere Schwachstellen https://b3ncloud.net/article/41151 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94052 - Apache MINA SSHD: LDAP password authentication ineffective https://b3ncloud.net/article/41150 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-94053 - Apache MINA SSHD: LDAP injection in sshd-ldap https://b3ncloud.net/article/41154 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-77185 - Apache MINA SSHD: Asynchronous authentication can bypass signature verification https://b3ncloud.net/article/41153 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-79625 - Improper Synchronization in Monitoring in CODESYS Control Runtime https://b3ncloud.net/article/41152 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-93994 - Apache MINA SSHD: Repeated-publickey policy bypass on server https://b3ncloud.net/article/41157 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103235 - MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events https://b3ncloud.net/article/41156 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103237 - MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows https://b3ncloud.net/article/41155 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-10764 - Information disclosure in BVMS 4.5 up to 12.3 https://b3ncloud.net/article/41158 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-103239 - MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection https://b3ncloud.net/article/41159 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 RSA Launches Agent ID Platform to Secure AI Agents and MCP Servers https://b3ncloud.net/article/41135 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102422: Kritische Shell-Injection in shell-quote ab Versionen vor 1.11.0 https://b3ncloud.net/article/41136 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Sechs kritische Netcore-Lücken in Routern: CVE-2026-101000 bis CVE-2026-101077 ermöglichen Fernangriffe https://b3ncloud.net/article/41162 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102509 - Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser https://b3ncloud.net/article/41161 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102510 - Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths https://b3ncloud.net/article/41160 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102511 - Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them https://b3ncloud.net/article/41165 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102454 - DigiWin｜EasyFlow .NET - Arbitrary File Upload https://b3ncloud.net/article/41164 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102455 - DigiWin｜EasyFlow .NET - Insecure Deserialization https://b3ncloud.net/article/41163 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-102458 - DigiWin｜EasyFlow .NET - Missing Authentication https://b3ncloud.net/article/41137 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT https://b3ncloud.net/article/41138 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions https://b3ncloud.net/article/41139 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 LMU München: Daten von 600.000 Studierenden abgeflossen https://b3ncloud.net/article/41140 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Mehr-Faktor-Authentifizierung mit Shibboleth und privacyIDEA https://b3ncloud.net/article/41141 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 AI Agent Finds Linux Kernel Bug That Turns a Tiny Memory Write Into Root Access https://b3ncloud.net/article/41142 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 New OperTraitors Tool Reveals Dangerous Privilege Escalation Paths in Kubernetes Operators https://b3ncloud.net/article/41166 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT https://b3ncloud.net/article/41119 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Unsloth Studio RCE Flaw Lets Malicious Hugging Face Models Execute Code https://b3ncloud.net/article/41120 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Fortinet Uncovers SectopRAT Variant Hidden Inside Tampered Legitimate Windows Software https://b3ncloud.net/article/41143 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8850-1: Linux kernel (BlueField) vulnerabilities https://b3ncloud.net/article/41167 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8849-1: Linux kernel (NVIDIA Tegra) vulnerabilities https://b3ncloud.net/article/41121 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8818-4: Linux kernel vulnerabilities https://b3ncloud.net/article/41144 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8817-2: Linux kernel (AWS FIPS) vulnerabilities https://b3ncloud.net/article/41123 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8819-4: Linux kernel (FIPS) vulnerabilities https://b3ncloud.net/article/41122 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 USN-8730-7: Linux kernel (FIPS) vulnerability https://b3ncloud.net/article/41124 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 Cyberangriff auf städtischen Betrieb in Kassel https://b3ncloud.net/article/41125 2026-09-30 weekly 0.7 B3ncloud.net de 2026-09-30 CVE-2026-92871 - Pgpool-II NULL Pointer Dereference Vulnerability