🛡️ Cyber Security Intelligence Hub

Echtzeit-Bedrohungsdaten, CVE-Feeds und Honeypot-Daten

🔴 Kritische & Hohe CVEs cvefeed.io

CVE-2026-8764 - H3C Magic B3 aspForm UpdateWanParams buffer overflow

HIGH CVE-2026-8764 📅 17.05.2026

CVE-2018-25339 - Zechat 1.5 SQL Injection via v parameter (time-based blind)

HIGH CVE-2018-25339 📅 17.05.2026

CVE-2018-25338 - Zechat 1.5 SQL Injection via hashtag parameter

HIGH CVE-2018-25338 📅 17.05.2026

CVE-2018-25335 - WordPress Plugin Peugeot Music 1.0 Arbitrary File Upload

CRITICAL CVE-2018-25335 📅 17.05.2026

CVE-2018-25333 - Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection

HIGH CVE-2018-25333 📅 17.05.2026

CVE-2018-25332 - GitBucket 4.23.1 Unauthenticated Remote Code Execution

CRITICAL CVE-2018-25332 📅 17.05.2026

CVE-2018-25330 - Joomla! EkRishta 2.10 Persistent XSS and SQL Injection

HIGH CVE-2018-25330 📅 17.05.2026

CVE-2018-25329 - WordPress Plugin WP with Spritz 1.0 Remote File Inclusion

HIGH CVE-2018-25329 📅 17.05.2026

🆕 Neueste CVEs cvefeed.io

CVE-2026-8786 - Tencent WeKnora Config API Endpoint initialization.go getKnowled...

LOW CVE-2026-8786 📅 18.05.2026

CVE-2026-8785 - projectworlds hospital-management-system-in-php GET Parameter up...

LOW CVE-2026-8785 📅 18.05.2026

CVE-2026-8784 - npitre cramfs-tools cramfsck.c change_file_status symlink

LOW CVE-2026-8784 📅 18.05.2026

CVE-2026-8782 - omec-project amf NGAP Message handler.go null pointer dereferenc...

MEDIUM CVE-2026-8782 📅 18.05.2026

CVE-2026-8781 - omec-project amf handler.go RANConfiguration null pointer derefe...

MEDIUM CVE-2026-8781 📅 18.05.2026

CVE-2026-8780 - omec-project amf NGAP Message dispatcher.go memory corruption

MEDIUM CVE-2026-8780 📅 18.05.2026

CVE-2026-8779 - omec-project amf handler.go NGSetupRequest memory corruption

MEDIUM CVE-2026-8779 📅 18.05.2026

CVE-2026-8777 - Edimax BR-6428NS POST Request formStaDrvSetup command injection

MEDIUM CVE-2026-8777 📅 18.05.2026

⚡ CISA Aktiv Ausgenutzt cisa.gov

CVE-2026-42897

Microsoft Exchange Server Cross-Site Scripting Vulnerability

📅 2026-05-15 | 🏢 Microsoft

CVE-2026-20182

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

📅 2026-05-14 | 🏢 Cisco

CVE-2026-42208

BerriAI LiteLLM SQL Injection Vulnerability

📅 2026-05-08 | 🏢 BerriAI

CVE-2026-6973

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

📅 2026-05-07 | 🏢 Ivanti

CVE-2026-0300

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

📅 2026-05-06 | 🏢 Palo Alto Networks

CVE-2026-31431

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

📅 2026-05-01 | 🏢 Linux

🔟 OWASP Top 10 owasp.org/2021

A01

Broken Access Control

Restrictions not enforced — users act outside permissions

A02

Cryptographic Failures

Weak or missing encryption exposes sensitive data

A03

Injection

SQL, NoSQL, OS, LDAP injection via untrusted data

A04

Insecure Design

Missing or ineffective security controls by design

A05

Security Misconfiguration

Default configs, unnecessary features, verbose errors

A06

Vulnerable Components

Using components with known vulnerabilities

A07

Auth Failures

Broken authentication allows account compromise

A08

Software Integrity Failures

Code and infra without integrity verification

A09

Logging Failures

Insufficient logging prevents breach detection

A10

SSRF

Server-Side Request Forgery fetches unvalidated URLs

View full OWASP Top 10 2021 →

📚 SANS Referenzposter

🛡️ Cyber Security Intelligence Hub

Rechtlicher Hinweis