cyberintel.kalymoon.com · 32826 articles · updated every 4 hours · grows forever
A vulnerability has been found in FrontAccounting up to 2.4.19 and classified as critical . Affected is an unknown function of the component POST Parameter Handler . The manipulation of the argument P…
A vulnerability was found in FrontAccounting up to 2.4.19 and classified as critical . Affected by this vulnerability is an unknown functionality. The manipulation of the argument PARAM_2/PARAM_3 resu…
A vulnerability was found in FrontAccounting up to 2.4.19 . It has been classified as critical . Affected by this issue is the function get_gl_transactions . This manipulation of the argument filter_t…
A vulnerability was found in HCL HCL DevOps Deploy and HCL Launch up to 7.3.2.18/8.0.1.13/8.1.2.6/8.2.1.0 . It has been declared as problematic . This affects an unknown part. Such manipulation leads …
A vulnerability was found in acl up to 2.3.x . It has been rated as problematic . This vulnerability affects the function lstat of the component Pathname . Performing a manipulation results in time-of…
A vulnerability categorized as critical has been discovered in acl up to 2.3.x . This issue affects the function acl_get_file/acl_set_file/acl_extended_file/acl_delete_def_file . Executing a manipulat…
A vulnerability identified as problematic has been detected in Eclipse CSI up to 0.2.1 . Impacted is an unknown function of the file /v1/upload/sbom of the component Audit Trail Service . The manipula…
A vulnerability labeled as critical has been found in Xmlsoft libxml2 up to 2.15.3 . The affected element is the function usershell of the component Xmlcatalog Utility . The manipulation results in st…
A vulnerability marked as critical has been reported in Red Hat OpenShift Dev Spaces . The impacted element is an unknown function of the component vscode-java Extension . This manipulation causes arg…
A vulnerability described as critical has been identified in Krajowa Izba Rozliczeniowa SzafirHost up to 1.2.1 . This affects an unknown function of the component JarFile Parser . Such manipulation le…
A vulnerability classified as critical has been found in acl up to 2.5.x . This impacts an unknown function of the component Pathname . Performing a manipulation results in link following. This vulner…
For the latest discoveries in cyber research for the week of 29th June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Polymarket, a large cryptocurrency-based prediction m…
I&#;x26;#;39;m in the throes of target host recon for another pentest, and thought I&#;x26;#;39;d share some workflow / automation stuff.
Series A Funding Supports Pre-Training, Reinforcement Learning for Security Models AI security startup Straiker closed a $64 million Series A funding round to expand GPU infrastructure, develop specia…
Emids' CAIO on Why Healthcare Leaders Are Treating AI as an Enterprise Investment Healthcare organizations are moving beyond debating AI's value and focusing on how to scale it. According to Emids' St…
A newly detailed injection technique has put Windows systems in the spotlight, revealing how attackers could abuse a deeply embedded part of the operating system to run malicious code inside another p…
AI-powered agents are no longer just answering questions. They now take actions, manage files, and run code on behalf of users. That shift has opened a dangerous new door, and attackers have already w…
Russia-linked threat group Turla has been quietly expanding its espionage arsenal with a new backdoor called STOCKSTAY, actively targeting government and military organizations in Ukraine since at lea…
A critical security vulnerability in Google’s Gemini CLI has been disclosed, allowing attackers to execute arbitrary code in certain CI/CD environments, particularly GitHub Actions workflows. The issu…
Microsoft has disclosed a critical remote code execution vulnerability in its Office ecosystem that can be exploited through a malicious Excel file. The vulnerability, tracked as CVE-2025-60727, affec…
Dell Technologies has released a critical security advisory addressing multiple vulnerabilities in its Wyse Management Suite (WMS), warning that attackers could exploit these flaws to execute arbitrar…
Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries
OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request
PrivacyHawk has announced the general availability of PrivacyHawk Enterprise, a solution that identifies and eliminates the shadow IT accounts, abandoned SaaS subscriptions, and forgotten third-party …