Automated cyber signal feeds.
CVE ID :CVE-2026-54412 Published : June 14, 2026, 5:26 p.m. | 54 minutes ago Description :LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_response() function in src that allows a remote unauthenticated attacker controlling…
CVE ID :CVE-2026-54410 Published : June 14, 2026, 5:10 p.m. | 1 hour, 11 minutes ago Description :nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled…
CVE ID :CVE-2026-54420 Published : June 14, 2026, 4:16 a.m. | 14 hours, 4 minutes ago Description :LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access…
CVE ID :CVE-2026-12174 Published : June 13, 2026, 9:16 p.m. | 21 hours, 5 minutes ago Description :A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler.…
CVE ID :CVE-2026-12183 Published : June 13, 2026, 6:16 p.m. | 1 hour, 22 minutes ago Description :Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The …
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring…
CVE ID :CVE-2026-11624 Published : June 13, 2026, 10:16 a.m. | 9 hours, 23 minutes ago Description :The Model Context Protocol has a security warning advising servers to validate the “Origin” header on all incoming connections to prevent DNS rebinding attacks. Prior…
Anthropic said on Friday it will “abruptly disable” its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models for foreign nationals, whether…
CVE ID :CVE-2026-53868 Published : June 12, 2026, 10:16 p.m. | 21 hours, 22 minutes ago Description :Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock…
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest…