Automated cyber signal feeds.
CVE ID :CVE-2026-108902 Published : Oct. 11, 2026, 3:16 p.m. | 3 hours, 7 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary…
CVE ID :CVE-2026-108863 Published : Oct. 11, 2026, 2:17 p.m. | 4 hours, 6 minutes ago Description :Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all…
CVE ID :CVE-2026-108865 Published : Oct. 11, 2026, 2:17 p.m. | 4 hours, 6 minutes ago Description :AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a…
CVE ID :CVE-2026-108860 Published : Oct. 11, 2026, 2:17 p.m. | 4 hours, 6 minutes ago Description :BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers…
CVE ID :CVE-2026-81797 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions. Severity: 9.8 | CRITICAL Visit the link for more…
CVE ID :CVE-2026-78535 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-78533 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-78531 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-78529 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Alliance <= 3.11 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-105889 Published : Oct. 10, 2026, 5:17 p.m. | 59 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a…