Automated cyber signal feeds.
CVE ID :CVE-2026-89049 Published : Sept. 10, 2026, 7:17 p.m. | 23 minutes ago Description :A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager…
CVE ID :CVE-2026-88060 Published : Sept. 10, 2026, 7:17 p.m. | 23 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering…
CVE ID :CVE-2026-88036 Published : Sept. 10, 2026, 7:17 p.m. | 23 minutes ago Description :Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to…
CVE ID :CVE-2026-88056 Published : Sept. 10, 2026, 7:17 p.m. | 23 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering…
CVE ID :CVE-2026-88058 Published : Sept. 10, 2026, 7:17 p.m. | 23 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering…
CVE ID :CVE-2026-54694 Published : Sept. 9, 2026, 7:17 p.m. | 17 minutes ago Description :SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths…
The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and deploying the…
CVE ID :CVE-2026-8044 Published : Sept. 9, 2026, 5:17 p.m. | 2 hours, 17 minutes ago Description :CWE-88: Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) vulnerability exists that could cause remote code execution by an attacker with a privileged…
CVE ID :CVE-2026-87929 Published : Sept. 9, 2026, 5:17 p.m. | 2 hours, 17 minutes ago Description :MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application that is never changed during installation, allowing unauthenticated attackers to forge administrator…
CVE ID :CVE-2026-87930 Published : Sept. 9, 2026, 5:17 p.m. | 2 hours, 17 minutes ago Description :MaxSite CMS through 109.6 passes the ci_session cookie to unserialize() without class restrictions, allowing unauthenticated attackers to inject PHP objects. Attackers can forge valid session…