Automated cyber signal feeds.
CVE ID :CVE-2026-9085 Published : July 5, 2026, 3:16 p.m. | 3 hours, 34 minutes ago Description :Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control:…
CVE ID :CVE-2026-59509 Published : July 5, 2026, 1:16 p.m. | 5 hours, 34 minutes ago Description :An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected…
CVE ID :CVE-2026-14721 Published : July 5, 2026, 8:16 a.m. | 10 hours, 34 minutes ago Description :A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web…
CVE ID :CVE-2026-14637 Published : July 4, 2026, 6:16 p.m. | 1 day ago Description :A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCartItems in the library application The manipulation of…
CVE ID :CVE-2026-14535 Published : July 4, 2026, 2:16 p.m. | 4 hours, 26 minutes ago Description :In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless…
CVE ID :CVE-2026-14534 Published : July 4, 2026, 2:16 p.m. | 4 hours, 26 minutes ago Description :Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS…
A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Krishnan for Ransom-ISAC, built on a leaked negotiation chat and the blockchain trail the payment left. The odd…
CVE ID :CVE-2026-12195 Published : July 4, 2026, 12:16 p.m. | 6 hours, 26 minutes ago Description :myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when…
CVE ID :CVE-2026-12196 Published : July 4, 2026, 12:16 p.m. | 6 hours, 26 minutes ago Description :HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP management…
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that’s distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution,…