cyberintel.kalymoon.com · 44733 articles · updated every 4 hours · grows forever
A vulnerability classified as problematic has been found in HAProxy up to 3.3.5 . This vulnerability affects unknown code of the component HTTP3 Parser . Performing a manipulation results in improper …
A vulnerability classified as problematic was found in Decidim up to 0.30.4/0.31.0 . This issue affects some unknown processing. Executing a manipulation of the argument Name can lead to cross site sc…
A vulnerability, which was classified as problematic , has been found in Pachno 1.0.6 . Impacted is the function Request::getRawParameter/Request::getParameter . The manipulation of the argument value…
A vulnerability, which was classified as problematic , was found in Pachno 1.0.6 . The affected element is an unknown function. The manipulation results in cross-site request forgery. This vulnerabili…
A vulnerability has been found in Pachno 1.0.6 and classified as critical . The impacted element is an unknown function of the file /uploadfile . This manipulation causes unrestricted upload. The iden…
A vulnerability was found in Pachno 1.0.6 and classified as problematic . This affects an unknown function. Such manipulation of the argument return_to leads to authentication bypass by primary weakne…
A vulnerability was found in KubePlus 4.14 . It has been classified as critical . This impacts the function subprocess.Popen of the file /registercrd of the component kubeconfiggenerator . Performing …
A vulnerability was found in Pachno 1.0.6 . It has been declared as critical . Affected is an unknown function. Executing a manipulation can lead to deserialization. This vulnerability is tracked as C…
A vulnerability was found in jqlang jq up to 1.8.1 . It has been rated as critical . Affected by this vulnerability is the function jvp_string_append/jvp_string_copy_replace_bad . The manipulation lea…
A vulnerability categorized as critical has been discovered in ABB AC800M, Symphony Plus SD, Symphony Plus MR and S+ Operations . Affected by this issue is some unknown functionality of the component …
A vulnerability identified as problematic has been detected in Pyro 3.x . This affects an unknown part of the component Pickled Handler . This manipulation causes privilege escalation. This vulnerabil…
A vulnerability labeled as problematic has been found in nimiq core-rs-albatross up to 1.2.x . This vulnerability affects the function validators.num_validators . Such manipulation leads to out-of-bou…
A vulnerability marked as critical has been reported in steveukx git-js up to 3.31.x . This issue affects some unknown processing. Performing a manipulation results in os command injection. This vulne…
A vulnerability described as critical has been identified in Python CPython up to 3.14.x . Impacted is the function lzma.LZMADecompressor/bz2.BZ2Decompressor/gzip.GzipFile of the component Decompressi…
A vulnerability classified as problematic has been found in Pachno 1.0.6 . The affected element is the function runSwitchUser . The manipulation leads to authorization bypass. This vulnerability is tr…
A vulnerability classified as critical was found in Pachno 1.0.6 . The impacted element is the function simplexml_load_string of the component XML Parser . The manipulation results in exposure of file…
Executives and high-privilege users are prime targets for credential theft — and standard monitoring often misses them. Learn how VIP Credential Monitoring in Recorded Future Identity Intelligence pro…
March 2026 saw a 139% increase in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 31 vulnerabilities requiring immediate remediation, up from 13 in February 2026.
Joël Winteregg of Vyntra on How AI Is Industrializing Fraud at Unprecedented Scale Gen AI has created a "paradise" for fraudsters, said Joel Winteregg, CEO of Vyntra. Just as Interpol coordinates acro…
European Governments Grow Suspicious of Silicon Valley French abandonment of American software for open-source alternatives continues apace, with all government ministries now facing a fall deadline f…
Anthropic’s Claude AI is facing a fresh wave of user-reported disruptions on April 13, 2026, with hundreds of users encountering intermittent HTTP 500 internal server errors across claude.ai, the API,…
OT asset owners are being asked by regulators to attest to their post-quantum cryptographic readiness without the appropriate tooling, resulting in paperwork dressed up to look like genuine security.
Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT. A modified version of BX RAT, JanelaRAT is kno…