CyberIntel ⬡ News
★ Saved ◆ Cyber Reads

// Cyber
Intel Feed

cyberintel.kalymoon.com  ·  27980 articles  ·  updated every 4 hours · grows forever

27980Total
22388Full Text
Jun 13, 2026Latest
◈ Women in Cyber ◉ Threat Intelligence ◎ How-To & Tutorials ⬡ Vulnerabilities & CVEs 🔍 Digital Forensics ◍ Incident Response & DFIR ◆ Security Tools & Reviews ◇ Industry News & Leadership ✉ Email Security 🛡 Active Threats ⚠ Critical CVEs ◐ Insider Threat & DLP ◌ Quantum Computing ◬ AI & Machine Learning
🔥 Trending Topics · Last 48h
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-8038 | mcinvale Faces of Users Plugin up to 0.0.3 on WordPress Shortcode facesofusers default cross site scripting

A vulnerability marked as problematic has been reported in mcinvale Faces of Users Plugin up to 0.0.3 on WordPress. Impacted is the function facesofusers of the component Shortcode Handler . Performin…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-8418 | askywhale Games Catalog Plugin up to 1.2.0 on WordPress GET Request gc_crud cross-site request forgery

A vulnerability described as problematic has been identified in askywhale Games Catalog Plugin up to 1.2.0 on WordPress. The affected element is the function gc_crud of the component GET Request Handl…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-8419 | submone Amazon Scraper Plugin up to 1.1 on WordPress Setting cross-site request forgery

A vulnerability classified as problematic has been found in submone Amazon Scraper Plugin up to 1.1 on WordPress. The impacted element is an unknown function of the component Setting Handler . The man…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-8420 | rdbeach BLOGCHAT Chat System Plugin up to 1.3.6.3 on WordPress Setting cross-site request forgery

A vulnerability classified as problematic was found in rdbeach BLOGCHAT Chat System Plugin up to 1.3.6.3 on WordPress. This affects an unknown function of the component Setting Handler . The manipulat…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-8423 | javibola JaviBola Custom Theme Test up to 2.0.5 on WordPress jbct_theme cross-site request forgery

A vulnerability, which was classified as problematic , has been found in javibola JaviBola Custom Theme Test up to 2.0.5 on WordPress. This impacts the function jbct_theme . This manipulation causes c…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-8424 | jay_patel Remove Yellow BGBOX Plugin up to 1.0 on WordPress Setting rybb_api_settings cross-site request forgery

A vulnerability, which was classified as problematic , was found in jay_patel Remove Yellow BGBOX Plugin up to 1.0 on WordPress. Affected is the function rybb_api_settings of the component Setting Han…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-43620 | RsyncProject rsync up to 3.4.2 receiver.c recv_files out-of-bounds (GHSA-28pw-r563-rxvm)

A vulnerability has been found in RsyncProject rsync up to 3.4.2 and classified as problematic . Affected by this vulnerability is the function recv_files of the file receiver.c . Performing a manipul…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-45232 | RsyncProject rsync up to 3.4.2 Environment Variable socket.c establish_proxy_connection RSYNC_PROXY off-by-one (GHSA-8f85-j2cv-59m8)

A vulnerability was found in RsyncProject rsync up to 3.4.2 and classified as problematic . Affected by this issue is the function establish_proxy_connection of the file socket.c of the component Envi…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-43619 | RsyncProject rsync up to 3.4.2 Exported Rsync toctou (GHSA-4h9m-w5ff-j735)

A vulnerability was found in RsyncProject rsync up to 3.4.2 . It has been classified as problematic . This affects an unknown part of the component Exported Rsync Module . The manipulation leads to ti…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-39309 | TriliumNext Trilium up to 0.102.1 clickjacking (GHSA-66pm-8hvq-2wwx)

A vulnerability was found in TriliumNext Trilium up to 0.102.1 . It has been declared as problematic . This vulnerability affects unknown code. The manipulation results in clickjacking. This vulnerabi…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-7522 | SigmaPlugin Advanced Database Cleaner Plugin up to 4.1.0 on WordPress template filename control (EUVD-2026-31062)

A vulnerability was found in SigmaPlugin Advanced Database Cleaner Plugin up to 4.1.0 on WordPress. It has been rated as critical . This issue affects some unknown processing. This manipulation of the…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-5075 | smub All in One SEO Plugin up to 4.9.7 on WordPress wp_localize_script information disclosure

A vulnerability categorized as problematic has been discovered in smub All in One SEO Plugin up to 4.9.7 on WordPress. Impacted is the function wp_localize_script . Such manipulation leads to informat…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-9057 | Talend Administration Center prior Patch_20251121_QTAC-1471_R2025-11_v1-8.0.1 access control (EUVD-2026-31061)

A vulnerability identified as critical has been detected in Talend Administration Center . The affected element is an unknown function. Performing a manipulation results in improper access controls. T…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-9056 | Talend Administration Center cross site scripting (EUVD-2026-31060)

A vulnerability labeled as problematic has been found in Talend Administration Center . The impacted element is an unknown function. Executing a manipulation can lead to cross site scripting. This vul…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-6566 | smub NextGEN Gallery Plugin up to 4.2.0 on WordPress /imagely/v1/images/ authorization

A vulnerability marked as critical has been reported in smub NextGEN Gallery Plugin up to 4.2.0 on WordPress. This affects an unknown function of the file /imagely/v1/images/ . The manipulation leads …

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-7385 | Decent Comments Plugin up to 3.0.1 on WordPress REST API Endpoint information disclosure

A vulnerability described as problematic has been identified in Decent Comments Plugin up to 3.0.1 on WordPress. This impacts an unknown function of the component REST API Endpoint . The manipulation …

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-44392 | Six Apart Movable Type authorization

A vulnerability classified as critical has been found in Six Apart Movable Type, Movable Type Advanced and Movable Type Premium . Affected is an unknown function. This manipulation causes missing auth…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-2955 | wupsales AI Chatbot & Workflow Automation by AIWU Plugin up to 1.4.14 on WordPress Header X-Forwarded-For cross site scripting

A vulnerability classified as problematic was found in wupsales AI Chatbot & Workflow Automation by AIWU Plugin up to 1.4.14 on WordPress. Affected by this vulnerability is an unknown functionality of…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-47783 | memcached up to 1.6.41 sasl_server_userdb_checkpass timing discrepancy

A vulnerability, which was classified as problematic , has been found in memcached up to 1.6.41 . Affected by this issue is the function sasl_server_userdb_checkpass . Performing a manipulation result…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-47784 | memcached up to 1.6.41 sasl_server_userdb_checkpass timing discrepancy

A vulnerability, which was classified as problematic , was found in memcached up to 1.6.41 . This affects the function sasl_server_userdb_checkpass . Executing a manipulation can lead to observable ti…

VulDB Read →
⬡ Vulnerabilities & CVEs May 20, 2026
CVE-2026-5776 | Email Encoder Plugin up to 2.4.6 on WordPress cross site scripting

A vulnerability has been found in Email Encoder Plugin up to 2.4.6 on WordPress and classified as problematic . This vulnerability affects unknown code. The manipulation leads to cross site scripting.…

VulDB Read →
◇ Industry News & Leadership May 20, 2026
PoC Exploit Released for 20-Year Old PostgreSQL RCE Vulnerability

A proof-of-concept (PoC) exploit has been publicly released for CVE-2026-2005, a critical remote code execution (RCE) vulnerability affecting PostgreSQL’s pgcrypto extension. The flaw, rooted in legac…

Cybersecurity News Read →
◇ Industry News & Leadership May 20, 2026
GitHub Hacked – Internal Source Code Repositories Compromised via Employee Device

GitHub has confirmed unauthorized access to its internal repositories after detecting a compromised employee device infected through a malicious Visual Studio Code extension, the company disclosed in …

Cybersecurity News Read →
◇ Industry News & Leadership May 20, 2026
What happens when your identity provider becomes the kill chain

In this Help Net Security video, Colin Constable, CTO at Atsign, explains why your identity provider (IdP) has become the kill chain in cyberattacks. Attackers steal session cookies, tokens, or consen…

Help Net Security Read →
← Prev 273 / 1166 Next →