cyberintel.kalymoon.com · 43435 articles · updated every 4 hours · grows forever
A vulnerability was found in OpenClaw up to 2026.4.1 and classified as problematic . This affects an unknown part of the component Workspace Channel Handler . The manipulation results in inclusion of …
A vulnerability was found in freescout-help-desk freescout up to 1.8.212 . It has been classified as problematic . This vulnerability affects the function Helper::stripDangerousTags of the file /mailb…
A vulnerability was found in NewSoft NewSoftOA . It has been declared as critical . This issue affects some unknown processing. Such manipulation leads to os command injection. This vulnerability is d…
A vulnerability was found in OpenClaw up to 2026.3.30 . It has been rated as problematic . Impacted is an unknown function of the component Remote Filesystem Bridge . Performing a manipulation results…
A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.3.30 . The affected element is an unknown function of the component Marketplace Plugin . Executing a manipulation can…
A vulnerability identified as critical has been detected in OpenClaw up to 2026.3.27 . The impacted element is an unknown function of the component Websocket Handshake Handler . The manipulation leads…
A vulnerability labeled as critical has been found in OpenClaw up to 2026.4.1 . This affects an unknown function of the file /sessions/:sessionKey/kill of the component Read-Scoped Call Handler . The …
A vulnerability marked as problematic has been reported in OpenClaw up to 2026.3.30 . This impacts an unknown function. This manipulation causes incomplete internal state distinction. This vulnerabili…
A vulnerability described as problematic has been identified in OpenClaw up to 2026.3.30 . Affected is an unknown function of the component Telegram Audio Preflight Transcription . Such manipulation l…
A vulnerability classified as problematic has been found in OpenClaw up to 2026.3.30 . Affected by this vulnerability is an unknown functionality of the component Nostr DM Handler . Performing a manip…
A vulnerability classified as critical was found in OpenClaw up to 2026.3.27 . Affected by this issue is some unknown functionality. Executing a manipulation can lead to incorrect authorization. The i…
A vulnerability, which was classified as problematic , has been found in OpenClaw up to 2026.3.30 . This affects an unknown part of the component Environment Variable Handler . The manipulation leads …
A vulnerability, which was classified as critical , was found in OpenClaw up to 2026.3.30 . This vulnerability affects unknown code. The manipulation of the argument senderIsOwner results in incorrect…
A vulnerability has been found in OpenClaw up to 2026.3.30 and classified as critical . This issue affects the function fetch of the component Marketplace Plugin . This manipulation causes server-side…
A vulnerability was found in langgenius dify up to 1.13.0 and classified as problematic . Impacted is an unknown function of the file /console/api/installed-apps/conversations/ of the component Chat H…
There have been reports of threat actors using a .wav file as a vector for malware.
A proof-of-concept (PoC) exploit has been publicly released for a newly disclosed vulnerability in Microsoft’s Snipping Tool that allows attackers to silently steal users’ Net-NTLM credential hashes b…
A well-known advanced persistent threat group called SideWinder has launched a highly targeted phishing campaign against South Asian government organizations, using a fake Chrome PDF viewer and a pixe…
Meta Bug Bounty and PortSwigger have formed a partnership to help security researchers sharpen their skills, collaborate more closely, and improve vulnerability discovery. The initiative combines Meta…
For $4,000 and a cut of the take, a lone criminal can now run a fully automated voice-phishing operation via ATHR, a plaform that spoofs emails alerts from Google, Microsoft, and Coinbase, buries a ph…
Cloud deployment and hosting platform Vercel has suffered a security breach that resulted in attackers accessing some of its internal systems and compromising Vercel credentials of a “limited subset o…
Application Security Engineer (DevSecOps / Azure DevOps) BEWAHARVEST | Philippines | Hybrid – No longer accepting applications As an Application Security Engineer (DevSecOps / Azure DevOps), you will …
Organizations in healthcare, finance, and other sensitive industries want to use large AI models without exposing private data to the cloud servers running those models. A cryptographic technique call…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including three flaws impacting Cisco C…