Anwendungssicherheit
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-86189: Critical Schwachstelle
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-10196: Critical Schwachstelle
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object...
ANWENDUNGSSICHERHEIT
🔴 CVE-2024-11080: Critical Schwachstelle
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-83627: Critical Schwachstelle
The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in...
ANWENDUNGSSICHERHEIT
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified...
ANWENDUNGSSICHERHEIT
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-27086: Medium Schwachstelle
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS. This issue affects...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-74853: Medium Schwachstelle
The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-85512: High Schwachstelle
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-85525: High Schwachstelle
Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be...