cyberintel.kalymoon.com · 34279 articles · updated every 4 hours · grows forever
A vulnerability marked as problematic has been reported in WPFunnels Mail Mint Plugin up to 1.19.5 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to e…
A vulnerability described as critical has been identified in Tobias CF7 WOW Styler Plugin up to 1.7.6 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in mi…
A vulnerability classified as critical has been found in Mattermost up to 10.11.14/11.4.4/11.5.3/11.6.0/11.6.x . This affects an unknown part. This manipulation causes path traversal. This vulnerabili…
A vulnerability classified as problematic was found in Honeywell International Control Network Module up to 110.2 . This vulnerability affects unknown code. Such manipulation leads to file and directo…
A vulnerability, which was classified as critical , has been found in FreeBSD up to p4/p8/p13 . This issue affects the function libcasper . Performing a manipulation results in stack-based buffer over…
A vulnerability, which was classified as critical , was found in FreeBSD . Impacted is an unknown function. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-20…
A vulnerability has been found in FreeBSD and classified as critical . The affected element is the function setcred of the component System Call Handler . The manipulation leads to stack-based buffer …
A vulnerability was found in MediaArea MediaInfoLib 26.01 and classified as critical . The impacted element is an unknown function. The manipulation results in use of out-of-range pointer offset. This…
A vulnerability was found in PowerDNS Authoritative up to 5.0.4 . It has been classified as problematic . This affects an unknown function of the component Proxy Request Handler . This manipulation ca…
A vulnerability was found in PowerDNS Authoritative up to 4.9.14/5.0.4 . It has been declared as problematic . This impacts an unknown function of the component AXFR Handler . Such manipulation leads …
A vulnerability was found in PowerDNS Authoritative up to 4.9.14/5.0.4 . It has been rated as problematic . Affected is an unknown function of the component Autoprimary SOA Query Handler . Performing …
A vulnerability categorized as problematic has been discovered in PowerDNS Authoritative up to 4.9.14/5.0.4 . Affected by this vulnerability is an unknown functionality of the component GSS-TSIG Handl…
A vulnerability identified as problematic has been detected in PowerDNS Authoritative up to 4.9.14/5.0.4 . Affected by this issue is some unknown functionality of the component Catalog Zone Transfer H…
A newly disclosed zero-day remote code execution (RCE) vulnerability, dubbed nginx-poolslip, has been identified in NGINX version 1.31.0, the latest stable release of the widely deployed web server so…
A highly critical security vulnerability in Drupal core is set to impact websites worldwide, with the official security release scheduled for May 20, 2026. The vulnerability has been assigned a “Highl…
Cisco has disclosed a critical security vulnerability in its Secure Workload platform that could allow unauthenticated attackers to gain unauthorized access to sensitive resources via internal APIs. T…
A dangerous piece of malware known as BadIIS has been actively targeting Internet Information Services (IIS) web servers, quietly hijacking them and redirecting unsuspecting visitors to illegal gambli…
Two newly disclosed Microsoft Defender vulnerabilities are being actively exploited in the wild, enabling local attackers to elevate privileges to SYSTEM and potentially disrupt endpoint protection ac…
A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-46333, exposes a serious local privilege escalation flaw that has remained undetected for nearly nine years. Security researchers at t…
GitHub confirmed a significant security breach on May 18, 2026, after attackers leveraged a weaponized Visual Studio Code extension to compromise an employee’s device and exfiltrate data from the comp…
Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack
Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally
Microsoft has open-sourced two new tools aimed at bringing AI safety checks much earlier into the agent development lifecycle. The tools, called Rampart and Clarity, were announced this week as part o…
Tenable has announced the general availability of Tenable Hexa AI, the agentic AI engine of the Tenable One Exposure Management Platform. Tenable Hexa AI is an advanced agentic AI for cybersecurity so…