cyberintel.kalymoon.com · 35426 articles · updated every 4 hours · grows forever
A vulnerability was found in opf openproject up to 17.3.x . It has been classified as problematic . Affected by this vulnerability is an unknown functionality of the file /api/v3/meetings . This manip…
A vulnerability was found in RustFS up to 1.0.0-beta.8 . It has been declared as problematic . Affected by this issue is some unknown functionality of the component Bucket Replication Admin API . Such…
A vulnerability was found in opf openproject up to 17.3.1 . It has been rated as problematic . This affects an unknown part of the component Document Update Endpoint . Performing a manipulation result…
A vulnerability categorized as problematic has been discovered in opf openproject up to 17.3.x . This vulnerability affects unknown code of the file /api/v3/relations . Executing a manipulation can le…
A vulnerability identified as critical has been detected in opf openproject up to 17.2.3/17.3.1 . This issue affects some unknown processing of the file /my/two_factor_devices of the component Docker …
A vulnerability labeled as critical has been found in RustFS 1.0.0-beta.4 . Impacted is an unknown function of the component Snowball auto-extract Feature . The manipulation results in path traversal.…
A vulnerability marked as problematic has been reported in RustFS up to 1.0.0-beta.8 . The affected element is an unknown function of the component Storage Backend . This manipulation causes missing a…
A vulnerability described as critical has been identified in budibase up to 3.38.x . The impacted element is an unknown function of the file /api/chat-links of the component Public Endpoint . Such man…
A vulnerability classified as problematic has been found in HCL Traveler for Microsoft Outlook up to 3.0.8 . This affects an unknown function. Performing a manipulation results in use of unmaintained …
A vulnerability classified as problematic was found in Lansweeper lsrunase 2.0 . This impacts an unknown function. Executing a manipulation can lead to password hash with insufficient computational ef…
A vulnerability, which was classified as problematic , has been found in notepad-plus-plus Notepad++ up to 8.9.5 . Affected is an unknown function of the component Powershell Handler . The manipulatio…
A vulnerability, which was classified as problematic , was found in relibc . Affected by this vulnerability is the function parse_month of the file /time/strptime.rs . The manipulation results in deni…
A vulnerability has been found in HashiCorp Shared Library and classified as problematic . Affected by this issue is the function DSO::mmap_and_copy . This manipulation causes denial of service. The i…
A vulnerability was found in x-image-tiff up to 0.42.x on Go and classified as problematic . This affects an unknown part of the component TIFF Decoder . Such manipulation leads to out-of-bounds read.…
Enterprise Users Face Delayed Access as Trusted Partners Get Early Preview OpenAI limited its release of GPT-5.6 to a short list of users after the Trump administration requested access to the model a…
Reused USB Drives Linked to China Spread Malware to Private Sector Counterfeit flash drives embedded with a Chinese-linked computer virus and used by the Japanese army are now dispensing malware throu…
AI Export Controls Expose Hidden Risks to Post-Quantum Cryptography Migrations Security leaders warn that post-quantum cryptography migration is creating new dependencies on foreign vendors, hyperscal…
Hackers are exploiting a critical vulnerability recently patched in PTC Windchill and FlexPLM, two product lifecycle management solutions used by organizations across a range of industries, including …
The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.
The fintech company's engineering-first application security team reengineered the process for granting system access, making it easier and more secure for developers working on their projects. Here a…
It might be taking a bit longer than usual to respond to your submissions — here's why.
Getting accurate visibility into IT and OT systems will be compounded by multivendor environments, misaligned update life cycles, and interoperability gaps.
Instead of eliminating jobs for early-career cyber pros, AI is creating new opportunities for candidates with strong human decision-making skills.
The Open Source Sustainability Initiative's goal is to help enterprises manage and secure aging open source projects while maintaining regulatory compliance.