Automated cyber signal feeds.
CVE ID :CVE-2026-45230 Published : May 18, 2026, 6:17 p.m. | 44 minutes ago Description :DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary files by…
CVE ID :CVE-2026-42822 Published : May 18, 2026, 6:17 p.m. | 44 minutes ago Description :Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. Severity: 10.0 | CRITICAL Visit the link for more…
INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests and the identification of an additional 382 suspects. The initiative involved the efforts of 13 countries from the region between…
CVE ID :CVE-2026-45829 Published : May 18, 2026, 5:16 p.m. | 1 hour, 45 minutes ago Description :A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the…
CVE ID :CVE-2018-25335 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the…
CVE ID :CVE-2018-25338 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit…
CVE ID :CVE-2018-25339 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can…
CVE ID :CVE-2018-25332 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file…
CVE ID :CVE-2018-25333 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :Nordex N149 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…
CVE ID :CVE-2021-47976 Published : May 16, 2026, 4:16 p.m. | 2 hours, 37 minutes ago Description :TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers…