Automated cyber signal feeds.
CVE ID :CVE-2026-63361 Published : Aug. 14, 2026, 6:18 p.m. | 16 minutes ago Description :LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are passed through…
CVE ID :CVE-2026-72777 Published : Aug. 13, 2026, 6:23 p.m. | 6 minutes ago Description :Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without…
CVE ID :CVE-2026-72741 Published : Aug. 13, 2026, 5:59 p.m. | 30 minutes ago Description :Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise’s…
CVE ID :CVE-2026-18428 Published : Aug. 13, 2026, 5:32 p.m. | 57 minutes ago Description :A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to…
CVE ID :CVE-2019-25765 Published : Aug. 13, 2026, 5:21 p.m. | 1 hour, 8 minutes ago Description :ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in…
CVE ID :CVE-2024-58374 Published : Aug. 13, 2026, 5:21 p.m. | 1 hour, 8 minutes ago Description :Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a…
CVE ID :CVE-2026-15423 Published : Aug. 12, 2026, 6:05 p.m. | 16 minutes ago Description :GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions…
CVE ID :CVE-2026-73327 Published : Aug. 12, 2026, 6:05 p.m. | 17 minutes ago Description :Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory…
CVE ID :CVE-2026-69106 Published : Aug. 12, 2026, 5:48 p.m. | 33 minutes ago Description :A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. Severity: 8.8 | HIGH Visit the link for…
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and…