Automated cyber signal feeds.
CVE ID :CVE-2026-96640 Published : Oct. 21, 2026, 9:20 p.m. | 15 minutes ago Description :Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src treats a PDF /Pages graph as a tree without tracking duplicate indirect references.…
CVE ID :CVE-2026-96639 Published : Oct. 21, 2026, 9:20 p.m. | 15 minutes ago Description :Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later…
CVE ID :CVE-2026-29001 Published : Oct. 21, 2026, 9:17 p.m. | 17 minutes ago Description :TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a…
CVE ID :CVE-2026-114142 Published : Oct. 21, 2026, 9:17 p.m. | 17 minutes ago Description :toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype because quoteDottedString() in lib produces the…
CVE ID :CVE-2026-114143 Published : Oct. 21, 2026, 9:17 p.m. | 17 minutes ago Description :toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib while processing long…
CVE ID :CVE-2026-112381 Published : Oct. 21, 2026, 7:20 p.m. | 20 minutes ago Description :Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is…
CVE ID :CVE-2026-111812 Published : Oct. 21, 2026, 7:18 p.m. | 23 minutes ago Description :Apache Traffic Server’s origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy’s own credentials. This issue affects Apache Traffic Server:…
CVE ID :CVE-2026-111811 Published : Oct. 21, 2026, 7:17 p.m. | 23 minutes ago Description :Apache Traffic Server’s experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects Apache Traffic Server: from 8.0.0…
CVE ID :CVE-2026-113870 Published : Oct. 21, 2026, 7:17 p.m. | 24 minutes ago Description :MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing…
CVE ID :CVE-2026-114268 Published : Oct. 21, 2026, 7:17 p.m. | 24 minutes ago Description :A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file This manipulation of the…