Automated cyber signal feeds.
CVE ID :CVE-2026-55084 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. A SQL injection vulnerability was identified in the SqlView API endpoint of…
CVE ID :CVE-2016-20096 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name…
CVE ID :CVE-2026-47418 Published : July 21, 2026, 6:17 p.m. | 1 hour, 26 minutes ago Description :PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The project CRUD…
CVE ID :CVE-2026-64619 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated attackers to circumvent request throttling by supplying attacker-controlled X-Real-IP and X-Forwarded-For…
CVE ID :CVE-2026-63108 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside…
CVE ID :CVE-2026-63770 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values…
CVE ID :CVE-2026-61425 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access. Severity: 9.4 | CRITICAL Visit the link for more details, such…
CVE ID :CVE-2026-61900 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE. Severity: 10.0 | CRITICAL Visit the link for more details, such…
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the activity has been attributed to…
A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the activity…