Automated cyber signal feeds.
CVE ID :CVE-2026-50733 Published : June 5, 2026, 5:49 p.m. | 36 minutes ago Description :Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), allowing arbitrary JavaScript execution. The flaw affects every render path –…
CVE ID :CVE-2026-49492 Published : June 5, 2026, 5:49 p.m. | 37 minutes ago Description :Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown…
CVE ID :CVE-2026-49493 Published : June 5, 2026, 5:49 p.m. | 36 minutes ago Description :Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block content as code via vm.runInNewContext(), allowing arbitrary code execution. A…
CVE ID :CVE-2026-25551 Published : June 4, 2026, 5:20 p.m. | 1 hour, 1 minute ago Description :Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-privileged local users to escalate privileges. The DataServiceSingleton .NET Remoting endpoint is…
CVE ID :CVE-2026-10880 Published : June 4, 2026, 5:19 p.m. | 1 hour, 1 minute ago Description :OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a…
CVE ID :CVE-2025-67446 Published : June 4, 2026, 5:16 p.m. | 1 hour, 4 minutes ago Description :Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie…
CVE ID :CVE-2026-25550 Published : June 4, 2026, 5:13 p.m. | 1 hour, 8 minutes ago Description :Seagull Software BarTender 2010, 2016, and 2019 contain an unauthenticated remote code execution vulnerability in the .NET Remoting service exposed on TCP port 7375 via…
Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public.…
CVE ID :CVE-2026-42321 Published : June 3, 2026, 4:16 p.m. | 1 hour, 59 minutes ago Description :GLPI is a free asset and IT management software package. Starting in version 10.0.4 and prior to version 10.0.25, a technician can store an XSS…
CVE ID :CVE-2026-5241 Published : June 3, 2026, 2:16 p.m. | 3 hours, 59 minutes ago Description :A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The…