Automated cyber signal feeds.
CVE ID :CVE-2026-96620 Published : Oct. 16, 2026, 8:18 p.m. | 42 minutes ago Description :Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token…
CVE ID :CVE-2026-61726 Published : Oct. 16, 2026, 8:17 p.m. | 43 minutes ago Description :Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and…
CVE ID :CVE-2026-30971 Published : Oct. 16, 2026, 8:17 p.m. | 43 minutes ago Description :ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands…
CVE ID :CVE-2026-102607 Published : Oct. 16, 2026, 8:17 p.m. | 43 minutes ago Description :ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command…
CVE ID :CVE-2026-102608 Published : Oct. 16, 2026, 8:17 p.m. | 43 minutes ago Description :ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor Name value in single quotes instead of using…
CVE ID :CVE-2026-111719 Published : Oct. 16, 2026, 6:17 p.m. | 42 minutes ago Description :Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can…
CVE ID :CVE-2026-111722 Published : Oct. 16, 2026, 6:17 p.m. | 42 minutes ago Description :LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users’ projects because projects.Get lacks an owner check.…
CVE ID :CVE-2026-111723 Published : Oct. 16, 2026, 6:17 p.m. | 42 minutes ago Description :LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT.…
CVE ID :CVE-2026-111710 Published : Oct. 16, 2026, 6:17 p.m. | 42 minutes ago Description :Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server’s user_auth() function that allows unauthenticated attackers to crash the server via…
CVE ID :CVE-2026-111711 Published : Oct. 16, 2026, 6:17 p.m. | 42 minutes ago Description :Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server’s user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into…