cyberintel.kalymoon.com · 53733 articles · updated every 4 hours · grows forever
Rob Fried joins the Forensic Focus Podcast to talk about the evolving challenges of forensic practice, AI in investigations, and his latest book.
A vulnerability was found in Secomea GateManager up to 11.2.624095033 and classified as critical . The affected element is an unknown function. Such manipulation leads to improper authentication. This…
A vulnerability was found in croixhaug Appointment Booking Calendar Plugin up to 1.6.10.0 on WordPress. It has been classified as critical . The impacted element is an unknown function. Performing a m…
A vulnerability was found in TODDR XML::Parser up to 2.47 on Perl. It has been declared as critical . This affects the function parse_stream of the file Expat.xs . Executing a manipulation can lead to…
A vulnerability was found in Slovensko.Digital Autogram up to 2.7.1 . It has been rated as problematic . This impacts an unknown function of the file XMLUtils.java . The manipulation leads to xml exte…
A vulnerability categorized as critical has been discovered in TODDR XML::Parser up to 2.47 on Perl. Affected is the function XML::Parser . The manipulation results in off-by-one. This vulnerability i…
A vulnerability identified as critical has been detected in GNOME localsearch . Affected by this vulnerability is an unknown functionality of the component MP3 Extractor . This manipulation causes hea…
A vulnerability labeled as critical has been found in GNOME localsearch . Affected by this issue is some unknown functionality of the component TXXX Tag Handler . Such manipulation leads to heap-based…
A vulnerability marked as critical has been reported in GNOME localsearch . This affects an unknown part of the component ID3v2.3 COMM Tag Handler . Performing a manipulation results in heap-based buf…
A vulnerability described as critical has been identified in GNOME localsearch . This vulnerability affects unknown code of the component MP3 Extractor . Executing a manipulation can lead to heap-base…
A vulnerability classified as critical has been found in BMC FootPrints up to 20.24.01.001 . This issue affects some unknown processing of the component ASP.NET Servlet . The manipulation of the argum…
A vulnerability classified as problematic was found in libarchive . Impacted is an unknown function of the component RAR Handler . The manipulation results in out-of-bounds read. This vulnerability wa…
A vulnerability, which was classified as critical , has been found in BMC FootPrints up to 20.24.01.001 . The affected element is an unknown function of the component REST API Endpoint . This manipula…
A vulnerability, which was classified as problematic , was found in libarchive . The impacted element is an unknown function of the component ISO File Parser . Such manipulation of the argument pz_log…
A vulnerability has been found in BMC FootPrints up to 20.24.01.001 and classified as critical . This affects an unknown function of the component Feed API . Performing a manipulation results in serve…
A vulnerability was found in BMC FootPrints up to 20.24.01.001 and classified as critical . This impacts an unknown function of the component searchWeb API . Executing a manipulation can lead to serve…
A vulnerability was found in Kubernetes . It has been classified as critical . Affected is an unknown function of the component CSI Driver . The manipulation of the argument subDir leads to path trave…
Explore Insikt Group’s 2025 Malicious Infrastructure Report. Gain insights into Cobalt Strike, Vidar infostealers, and AI-driven threats to secure your 2026 strategy.
Fresh Vulnerability Found in Windows AI-Enabled 'Photographic Memory' Feature Microsoft's determination to embed the automatic screenshot storage and retrieval feature dubbed Recall into operating sys…
A well-known banking trojan called Horabot has resurfaced in an active campaign targeting users across Mexico, combining a multi-stage infection chain with an email worm that turns every compromised m…
Three chained vulnerabilities in Claude.ai, Anthropic’s widely used AI assistant, that together allow attackers to silently exfiltrate sensitive conversation data and redirect unsuspecting users to ma…
A malicious Python package named pyronut has been discovered on the Python Package Index (PyPI), targeting developers who build Telegram bots by impersonating the popular pyrogram framework. Rather th…
The rise of AI-assisted coding has brought real value to developers around the world, but it has also opened a new door for cybercriminals to exploit. A concept known as “vibe coding” — where users si…
Ubiquiti has disclosed two critical-to-high severity vulnerabilities in its widely deployed UniFi Network Application, including a maximum-severity flaw that could allow unauthenticated attackers to s…