🛡️ Cyber Security Intelligence Hub

Echtzeit-Bedrohungsdaten, CVE-Feeds und Honeypot-Daten

🔴 Kritische & Hohe CVEs cvefeed.io

CVE-2016-20096 - Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp

CRITICAL CVE-2016-20096 📅 21.07.2026

CVE-2026-47419 - praisonai-platform: Agent endpoints accept any agent_id without...

HIGH CVE-2026-47419 📅 21.07.2026

CVE-2026-47418 - praisonai-platform: Project endpoints accept any project_id wit...

HIGH CVE-2026-47418 📅 21.07.2026

CVE-2026-47417 - praisonai-platform: Comment endpoints accept any issue_id witho...

HIGH CVE-2026-47417 📅 21.07.2026

CVE-2026-47416 - praisonai-platform: Any workspace member can promote themselves...

CRITICAL CVE-2026-47416 📅 21.07.2026

CVE-2026-47415 - praisonai-platform: Issue endpoints accept any issue_id without...

HIGH CVE-2026-47415 📅 21.07.2026

CVE-2026-47413 - praisonai-platform: Any workspace member can add arbitrary user...

CRITICAL CVE-2026-47413 📅 21.07.2026

CVE-2026-47412 - praisonai-platform: Any workspace member can delete the entire ...

HIGH CVE-2026-47412 📅 21.07.2026

🆕 Neueste CVEs cvefeed.io

CVE-2026-15957 - Uncontrolled recursion in smithy-rs generated JSON, CBOR, and X...

HIGH CVE-2026-15957 📅 21.07.2026

CVE-2026-49092 - Unintended Proxy or Intermediary ('Confused Deputy') in Kibana ...

MEDIUM CVE-2026-49092 📅 21.07.2026

CVE-2026-56852 - Infinite loop on invalid input in golang.org/x/text

LOW CVE-2026-56852 📅 21.07.2026

CVE-2026-46600 - Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/n...

LOW CVE-2026-46600 📅 21.07.2026

CVE-2026-64877 - Ticketing REST API SQL Injection Vulnerability

CRITICAL CVE-2026-64877 📅 21.07.2026

CVE-2026-63454 - Authenticated Path Traversal Vulnerability Leads to Remote Code...

HIGH CVE-2026-63454 📅 21.07.2026

CVE-2026-63453 - Authenticated Buffer Overflow Vulnerabilities lead to Remote Co...

HIGH CVE-2026-63453 📅 21.07.2026

CVE-2026-59142 - Data::HashMap::Shared versions before 0.14 for Perl allow an ou...

LOW CVE-2026-59142 📅 21.07.2026

⚡ CISA Aktiv Ausgenutzt cisa.gov

CVE-2026-60137

WordPress Core SQL Injection Vulnerability

📅 2026-07-21 | 🏢 WordPress

CVE-2026-63030

WordPress Core Interpretation Conflict Vulnerability

📅 2026-07-21 | 🏢 WordPress

CVE-2026-0770

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

📅 2026-07-21 | 🏢 Langflow

CVE-2021-27137

DD-WRT Stack-Based Buffer Overflow Vulnerability

📅 2026-07-21 | 🏢 DD-WRT

CVE-2026-58644

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

📅 2026-07-16 | 🏢 Microsoft

CVE-2026-25089

Fortinet FortiSandbox OS Command Injection Vulnerability

📅 2026-07-16 | 🏢 Fortinet

🔟 OWASP Top 10 owasp.org/2021

A01

Broken Access Control

Restrictions not enforced — users act outside permissions

A02

Cryptographic Failures

Weak or missing encryption exposes sensitive data

A03

Injection

SQL, NoSQL, OS, LDAP injection via untrusted data

A04

Insecure Design

Missing or ineffective security controls by design

A05

Security Misconfiguration

Default configs, unnecessary features, verbose errors

A06

Vulnerable Components

Using components with known vulnerabilities

A07

Auth Failures

Broken authentication allows account compromise

A08

Software Integrity Failures

Code and infra without integrity verification

A09

Logging Failures

Insufficient logging prevents breach detection

A10

SSRF

Server-Side Request Forgery fetches unvalidated URLs

View full OWASP Top 10 2021 →

📚 SANS Referenzposter

🛡️ Cyber Security Intelligence Hub

Rechtlicher Hinweis