cyberintel.kalymoon.com · 33453 articles · updated every 4 hours · grows forever
A vulnerability labeled as critical has been found in projectworlds Online Art Gallery Shop 1.0 . Impacted is an unknown function of the file /admin/adminHome.php . Executing a manipulation of the arg…
A vulnerability marked as critical has been reported in Ettercap up to 0.8.3 . The affected element is the function FUNC_DECODER of the file src/dissectors/ec_gg.c of the component GG Dissector . The …
A vulnerability described as critical has been identified in NousResearch hermes-agent 2026.4.23 . The impacted element is the function _scan_context_content of the file agent/prompt_builder.py . The …
A vulnerability classified as critical has been found in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63 . This affects the function detect_dangerous_command of the file tools…
A vulnerability classified as critical was found in NousResearch hermes-agent up to 2026.4.16 . This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environ…
A vulnerability, which was classified as problematic , has been found in NousResearch hermes-agent 2026.4.23 . Affected is the function _discover_dashboard_plugins of the file hermes_cli/web_server.py…
A vulnerability, which was classified as problematic , was found in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4 . Affected by this vulnerability is the function getSecretKeySaltGenerator of the…
A multi-stage intrusion attack where a threat actor exploited an internet-facing F5 BIG-IP edge appliance as the entry point for a widespread, identity-focused attack that ultimately accessed Active D…
A newly disclosed flaw in one of the world’s most widely deployed web servers is forcing administrators into another emergency patch cycle. Tracked as CVE-2026-9256 and publicly nicknamed nginx-poolsl…
The stealthy vulnerability impacts roughly 88 million domains and can be exploited to bypass DNS filtering and hide command-and-control traffic. The post ‘Underminr’ Vulnerability Lets Attackers Hide …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based o…
A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild. The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to …
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing fr…
Cavco Industries, Inc. 2026 Annual Report: Business Strategies, Risk Factors, and Cybersecurity Governance Minichart
Calling All Digital Identity & Cybersecurity Innovators: Future Digital Awards Now Open for 2026 Yahoo Finance UK
A Look At Cellebrite DI (CLBT) Valuation After Q1 2026 Earnings And New Growth Guidance simplywall.st
Vulnerability in Notepad++ Cyber Security Agency of Singapore
A vulnerability, which was classified as critical , has been found in Docker Desktop up to 4.70.x . This impacts an unknown function of the file config.json of the component MLX Inference Backend . Th…
A vulnerability, which was classified as problematic , was found in jupyterhub up to 5.4.4 . Affected is an unknown function of the file /hub/spawn of the component JSON API . Such manipulation leads …
A vulnerability has been found in bestpractical rt up to 5.0.9/6.0.2 and classified as problematic . Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cs…
A vulnerability was found in bestpractical rt up to 5.0.9/6.0.2 and classified as critical . Affected by this issue is some unknown functionality. Executing a manipulation can lead to sql injection. T…
A vulnerability was found in strukturag libheif up to 1.21.x . It has been classified as critical . This affects the function get_num_samples of the component AVIF File Handler . The manipulation lead…
A vulnerability was found in TP-Link Archer RE650 v1, Archer RE305 v1, Archer RE360 v1, TL-WA860RE v4 and RE580D v1 . It has been declared as very critical . This vulnerability affects unknown code of…