Automated cyber signal feeds.
CVE ID :CVE-2026-93749 Published : Sept. 18, 2026, 5:51 p.m. | 37 minutes ago Description :source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely…
CVE ID :CVE-2026-93337 Published : Sept. 17, 2026, 7:17 p.m. | 1 hour, 2 minutes ago Description :NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or…
CVE ID :CVE-2026-54617 Published : Sept. 17, 2026, 7:16 p.m. | 1 hour, 3 minutes ago Description :GravitLauncher is an open-source Minecraft launcher based on sashok724’s v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without…
CVE ID :CVE-2026-55062 Published : Sept. 17, 2026, 7:16 p.m. | 1 hour, 3 minutes ago Description :uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd concatenates an unvalidated hook filename with…
CVE ID :CVE-2026-54504 Published : Sept. 17, 2026, 7:16 p.m. | 1 hour, 3 minutes ago Description :MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI…
CVE ID :CVE-2026-54571 Published : Sept. 17, 2026, 7:16 p.m. | 1 hour, 3 minutes ago Description :ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser in src stores _boundaryPosition…
CVE ID :CVE-2026-93292 Published : Sept. 17, 2026, 5:18 p.m. | 1 hour, 1 minute ago Description :SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_name fields into ClickHouse string literals…
CVE ID :CVE-2026-92980 Published : Sept. 17, 2026, 5:17 p.m. | 1 hour, 2 minutes ago Description :HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user…
CVE ID :CVE-2026-54580 Published : Sept. 17, 2026, 5:16 p.m. | 1 hour, 3 minutes ago Description :mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport did not make every truncated, corrupt, or failed zstd stream fatal in mport_decompress_zstd(), and libmport…
CVE ID :CVE-2026-54581 Published : Sept. 17, 2026, 5:16 p.m. | 1 hour, 3 minutes ago Description :mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_bootstrap_index() function in libmport could return success when bootstrap index hash verification encountered a missing…