Endpunktsicherheit
ENDPUNKTSICHERHEIT
🟡 CVE-2026-12270: Medium Schwachstelle
The Everest Forms WordPress plugin before 3.5.0 does not correctly restrict access to several REST API endpoints belonging to its...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-31982: High Luecke in Nozominetworks Guardian
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-47828: High Schwachstelle
During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-8848: High Schwachstelle
The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-57111: High Luecke in Apache Helix
Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFilter) in Apache Helix through 2.0.0 on all platforms allows...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-47831: High Schwachstelle
Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-4275: High Schwachstelle
The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-47830: High Schwachstelle
Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-age...
ENDPUNKTSICHERHEIT
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software...
ENDPUNKTSICHERHEIT
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not...