cyberintel.kalymoon.com · 44018 articles · updated every 4 hours · grows forever
A vulnerability was found in essentialplugin Accordion and Accordion Slider Plugin 1.4.6 on WordPress. It has been rated as critical . Affected by this issue is some unknown functionality. Performing …
A vulnerability categorized as critical has been discovered in unitecms Unlimited Elements for Elementor Plugin up to 2.0.6 on WordPress. This affects the function URLtoRelative/URLToPath of the compo…
A vulnerability identified as critical has been detected in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593 . This vulnerability affects unknown code of the file admin/editcourse.php of t…
A vulnerability labeled as critical has been found in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593 . This issue affects some unknown processing of the file admin/addteacher.php of the …
A vulnerability marked as critical has been reported in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593 . Impacted is an unknown function of the file admin/deletecourse.php of the compone…
A vulnerability described as problematic has been identified in libvips up to 8.18.2 . The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of the component …
A vulnerability classified as problematic has been found in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea . The impacted element is an unknown function of the…
A vulnerability classified as problematic was found in lukevella rallly up to 4.7.4 . This affects an unknown function of the file apps/web/src/app/[locale]/(auth)/reset-password/components/reset-pass…
A vulnerability, which was classified as critical , has been found in Dell PowerProtect Data Domain up to 7.13.1.50/8.3.1.20/8.5 . This impacts an unknown function. The manipulation leads to use of we…
Introduction
A newly disclosed zero-day vulnerability in Microsoft Defender, dubbed “RedSun,” allows an unprivileged user to escalate privileges to full SYSTEM-level access on fully patched Windows 10, Windows 11,…
Microsoft has officially acknowledged a known issue affecting Windows 11 users following the release of its April 2026 Patch Tuesday cumulative updates. Devices running certain BitLocker Group Policy …
A new wave of cyber attacks is hitting trucking carriers and freight brokers, and the goal is not just data theft. Criminals are breaking into logistics companies digitally to steal physical cargo shi…
A newly discovered piece of malware called ZionSiphon has raised serious concerns about the security of critical water infrastructure in Israel. The malware was built with a clear focus: to infiltrate…
In einem falschen Security-Mindset gefangen? Foto: Paul Craft – shutterstock.com Dass Jobs im Bereich Cybersecurity ein hohes Burnout-Potenzial aufweisen, ist längst kein Geheimnis mehr: Das Umfeld vo…
Authorities in 21 countries participated in a coordinated action against DDoS-for-hire services. The post 53 DDoS Domains Taken Down by Law Enforcement appeared first on SecurityWeek .
An indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines. The post Cursor AI Vulnerability Exposed Developer Devices appeared…
An international law enforcement operation has taken down 53 domains and arrested four people in connection with commercial distributed denial-of-service (DDoS) operations that were used by more than …
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed in its National Vulnerability Database (…
Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or elevated administrator permissions. [...]
23-year-old Kamerin Stokes of Memphis, Tennessee, was sentenced to 30 months in prison for selling access to tens of thousands of hacked DraftKings accounts. [...]
Microsoft warns that some Windows domain controllers are entering restart loops after installing the April 2026 security updates. [...]
ConductorOne Extends Reach of Identity Governance to AI Security Boulevard