Endpunktsicherheit
ENDPUNKTSICHERHEIT
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-10734: High Schwachstelle
The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in all versions up...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-73057: High Schwachstelle
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-17087: High Schwachstelle
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-19728: High Schwachstelle
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-19717: High Schwachstelle
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its...
ENDPUNKTSICHERHEIT
🔴 CVE-2026-19349: Critical Schwachstelle
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via...
ENDPUNKTSICHERHEIT
Shell investigates ‚potential incident‘ after Clop data theft claims
Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole...
ENDPUNKTSICHERHEIT
New AmnesiaStealer macOS malware hijacks browser sessions via remote control
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the...
ENDPUNKTSICHERHEIT
AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware...