cyberintel.kalymoon.com · 46294 articles · updated every 4 hours · grows forever
A vulnerability, which was classified as problematic , has been found in Zootemplate Cerato Plugin up to 2.2.18 on WordPress. Affected by this issue is some unknown functionality. The manipulation lea…
A vulnerability, which was classified as critical , was found in BerriAI LiteLLM bb0639701796218a3447160e55c0f1097446e4e6085df7dfd39f476d4143743f . This affects an unknown part of the file /guardrails…
A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical . This vulnerability affects unknown code of the file scheduleSubList.php . This manipula…
A vulnerability was found in PHP-MYSQL-User-Login-System 1.0 and classified as critical . This issue affects some unknown processing of the file login.php . Such manipulation of the argument Username …
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 . It has been classified as critical . Impacted is an unknown function of the file newCourse.php . Performing a manipulat…
A vulnerability was found in BMC Control-M MFT up to 9.0.22 . It has been declared as critical . The affected element is an unknown function of the component API Debug Interface . Executing a manipula…
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 . It has been rated as critical . The impacted element is an unknown function of the file instructorClasses.php . The man…
A vulnerability categorized as critical has been discovered in SourceCodester Engineers Online Portal 1.0 . This affects an unknown function of the file update_password.php . The manipulation of the a…
A vulnerability identified as critical has been detected in itsourcecode Online Student Enrollment System 1.0 . This impacts an unknown function of the file assignInstructorSubjects.php . This manipul…
A vulnerability labeled as critical has been found in BMC Control-M MFT 9.0.20/9.0.21/9.0.22 . Affected is an unknown function of the component API Management Endpoint . Such manipulation leads to imp…
A vulnerability marked as problematic has been reported in Altenar Sportsbook Software Platform 2.0 . Affected by this vulnerability is an unknown functionality of the component URL Parameter Handler …
A vulnerability described as critical has been identified in owntone-server 2ca10d9 . Affected by this issue is some unknown functionality. Executing a manipulation can lead to buffer overflow. This v…
Operational Discipline and Judgment Are Critical in Managing Cyber Risk Transitioning from armed forces can feel like stepping into unfamiliar terrain. Nowhere is this perception stronger than in cybe…
Cybercriminals are now turning two of the most trusted developer platforms in the world — GitHub and GitLab — into tools for spreading malware and stealing login credentials from unsuspecting users. S…
A critical and largely overlooked attack surface in the AI agent ecosystem, third-party API routers that can be weaponized to silently hijack tool calls, drain cryptocurrency wallets, and exfiltrate s…
A targeted mobile espionage campaign has been quietly operating across the Middle East since at least 2022, using fake versions of widely trusted secure messaging apps to plant a powerful Android spyw…
Hewlett-Packard Enterprise (HPE) has disclosed a security flaw in its Aruba Networking Private 5G Core On-Prem platform. This vulnerability allows attackers to steal user credentials by exploiting an …
A recently disclosed high-severity vulnerability in GitHub Copilot Chat allowed attackers to silently siphon sensitive data from private repositories. Tracked as CVE-2025-59145 with a near-perfect CVS…
The FBI, CISA, NSA, EPA, DOE, and U.S. Cyber Command jointly disclosed on April 7, 2026, that Iranian-affiliated advanced persistent threat (APT) actors are actively targeting internet-facing Rockwell…
Cybercriminals are capitalizing on the excitement around BTS’s long-awaited return to the world stage by setting up fraudulent ticket websites that steal money from unsuspecting fans. The campaign has…
When voters in the forthcoming Hungarian election assess the current government, its record on internet security will not be one of its proudest achievements. An analysis by open source investigation …
German police have pinned a name to one of the world’s most notorious hackers. Danii Shchukin operated under the names of UNKN or Unknown and GandCrab and was, according to German police, the leader o…
Security researchers at Jamf have uncovered a new ClickFix-style attack targeting Mac users via a fake Apple-themed webpage offering instructions on how to “reclaim disk space on your Mac”. The malici…
The US government has warned that Iran-linked hackers are manipulating PLCs and SCADA systems to cause disruption. The post Industry Reactions to Iran Hacking ICS in Critical Infrastructure: Feedback …