LR pixel

n8n Unauthenticated Remote Code Execution

von | 9. Jan. 2026 | Unkategorisiert

What is the Vulnerability? CVE-2026-21858 arises from a Content-Type confusion flaw in n8n’s webhook and form handling logic. Specifically, certain form-based workflows do not adequately validate or enforce multipart form content types, allowing attackers to override...

MongoBleed Unauthenticated Memory Leak

von | 31. Dez. 2025 | Unkategorisiert

What is the Vulnerability? A critical vulnerability in MongoDB Server’s handling of zlib-compressed network traffic allows a fully unauthenticated remote attacker to read uninitialized heap memory and leak sensitive data directly from server memory. The flaw stems...

Cisco AsyncOS Zero-day

von | 19. Dez. 2025 | Unkategorisiert

What is the Attack? Cisco has confirmed the active exploitation of a critical zero-day vulnerability in AsyncOS, tracked as CVE-2025-20393, affecting Cisco Secure Email Gateway (SEG) and Secure Email and Web Manager (SEWM) appliances. The vulnerability allows...

EDR-Freeze Bypass Technique

von | 3. Dez. 2025 | Unkategorisiert

What is the EDR‑Freeze? EDR‑Freeze is a proof‑of‑concept technique that leverages legitimate Windows Error Reporting (WER) components to suspend (place into a ‘frozen’ state) endpoint protection processes from user mode. Instead of exploiting drivers or kernel...

Oracle Identity Manager Pre-Auth RCE

von | 3. Dez. 2025 | Unkategorisiert

What is the Vulnerability? CVE-2025-61757 is a critical pre-authentication remote code execution vulnerability in Oracle Identity Manager’s REST WebServices. This vulnerability allows an unauthenticated attacker to exploit URI and matrix parameter parsing weaknesses...

UNC1549 Critical Infrastructure Espionage Attack

von | 3. Dez. 2025 | Unkategorisiert

What is the Attack? A suspected Iran-linked espionage group tracked as UNC1549 is actively targeting aerospace, defense, and telecommunications organizations across Europe and other regions. The threat actor employs a combination of highly tailored spear-phishing,...

runC Container Escape Vulnerabilities

von | 7. Nov. 2025 | Unkategorisiert

What is the Vulnerability? High-severity vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) were disclosed in early November 2025. A malicious or compromised container image can abuse how runc handles masked paths, bind-mounts, and special files...