Automated cyber signal feeds.
CVE ID :CVE-2026-54420 Published : June 14, 2026, 4:16 a.m. | 14 hours, 4 minutes ago Description :LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access…
CVE ID :CVE-2026-12174 Published : June 13, 2026, 9:16 p.m. | 21 hours, 5 minutes ago Description :A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler.…
CVE ID :CVE-2026-12183 Published : June 13, 2026, 6:16 p.m. | 1 hour, 22 minutes ago Description :Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The …
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring…
CVE ID :CVE-2026-11624 Published : June 13, 2026, 10:16 a.m. | 9 hours, 23 minutes ago Description :The Model Context Protocol has a security warning advising servers to validate the “Origin” header on all incoming connections to prevent DNS rebinding attacks. Prior…
Anthropic said on Friday it will “abruptly disable” its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models for foreign nationals, whether…
CVE ID :CVE-2026-53868 Published : June 12, 2026, 10:16 p.m. | 21 hours, 22 minutes ago Description :Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock…
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest…
CVE ID :CVE-2026-53408 Published : June 12, 2026, 7:16 p.m. | 14 minutes ago Description :Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user…
CVE ID :CVE-2026-50101 Published : June 12, 2026, 7:16 p.m. | 14 minutes ago Description :Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely…