Automated cyber signal feeds.
CVE ID :CVE-2026-56260 Published : July 12, 2026, 12:16 p.m. | 6 hours, 29 minutes ago Description :Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server’s /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths…
The jscrambler npm package was compromised, and simply installing its 8.14.0 release runs an infostealer on your machine. Published on July 11, 2026, the malicious version carries a preinstall hook that drops and executes a native binary, one build each for Windows, macOS, and…
Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by suspected China- and India-aligned threat actors between February 2024 and April 2026. “At Balochistan Police, the compromised assets included servers hosting web…
CVE ID :CVE-2026-61447 Published : July 11, 2026, 2:16 p.m. | 4 hours, 24 minutes ago Description :PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers…
CVE ID :CVE-2026-61445 Published : July 11, 2026, 2:16 p.m. | 4 hours, 24 minutes ago Description :PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM…
CVE ID :CVE-2026-61429 Published : July 11, 2026, 2:16 p.m. | 4 hours, 24 minutes ago Description :PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding…
CVE ID :CVE-2026-6212 Published : July 10, 2026, 6:35 p.m. | 42 minutes ago Description :Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies Inc. TeraMIS allows Privilege Abuse. This issue affects TeraMIS: from V03.26.01.14 through 30.04.2026. Severity: 8.8 |…
CVE ID :CVE-2026-61459 Published : July 10, 2026, 6:34 p.m. | 43 minutes ago Description :MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by…
CVE ID :CVE-2026-61460 Published : July 10, 2026, 6:24 p.m. | 53 minutes ago Description :Krayin CRM through 2.2.3 contains an insecure direct object reference vulnerability in LeadController, PersonController, OrganizationController, QuoteController, and ActivityController that allows authenticated users to edit, update, or…
CVE ID :CVE-2026-56668 Published : July 10, 2026, 6:16 p.m. | 1 hour, 1 minute ago Description :ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL’s OAuth2 Token Exchange endpoint for urn:ietf:params:oauth:grant-type:token-exchange does not verify that the subject token…