cyberintel.kalymoon.com · 35351 articles · updated every 4 hours · grows forever
A vulnerability was found in Cisco ThousandEyes Enterprise Agent and classified as critical . This affects an unknown function of the component SSL Certificate Handler . Executing a manipulation can l…
A vulnerability was found in Cisco ThousandEyes Enterprise Agent up to 5.1.3 . It has been classified as critical . This impacts an unknown function of the component BrowserBot . The manipulation lead…
A vulnerability was found in Cisco Secure Workload . It has been declared as critical . Affected is an unknown function of the component REST API . The manipulation results in missing authentication. …
A vulnerability was found in Arctera InfoScale Operations Manager 9.1.3 . It has been rated as problematic . Affected by this vulnerability is an unknown functionality of the component VIOM Web Applic…
A vulnerability categorized as problematic has been discovered in PixelYourSite Cost of Goods Plugin up to 1.2.12 on WordPress. Affected by this issue is some unknown functionality. Such manipulation …
A vulnerability identified as problematic has been detected in MongoDB C Driver up to 1.30.7/2.2.3 . This affects an unknown part of the component Legacy GridFS API . Performing a manipulation results…
A vulnerability labeled as problematic has been found in MongoDB Compass . This vulnerability affects unknown code. Executing a manipulation can lead to improperly controlled modification of object pr…
A vulnerability marked as problematic has been reported in Keycloak on Red Hat. This issue affects some unknown processing. The manipulation leads to authorization bypass. This vulnerability is unique…
A vulnerability described as critical has been identified in Arctera InfoScale Operations Manager up to 9.1.2 . Impacted is an unknown function. The manipulation results in sql injection. This vulnera…
A vulnerability classified as critical has been found in Arctera InfoScale up to 7.4.1 . The affected element is an unknown function of the component CmdServer . This manipulation causes improper acce…
A vulnerability classified as problematic was found in Arctera InfoScale VIOM 9.1.3 . The impacted element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability i…
A vulnerability, which was classified as problematic , has been found in Splunk Enterprise and Cloud Platform . This affects an unknown function. Performing a manipulation results in sensitive informa…
A vulnerability, which was classified as problematic , was found in Splunk AI Toolkit up to 5.7.2 . This impacts an unknown function of the file authorize.conf of the component Configuration File Hand…
A vulnerability has been found in Splunk Enterprise and Cloud Platform and classified as problematic . Affected is an unknown function of the file coldToFrozen.sh of the component splunk_archiver App …
A vulnerability was found in cyntler react 1.17.1 and classified as problematic . Affected by this vulnerability is an unknown functionality of the component TXTRenderer . The manipulation results in …
Read about the unique challenges and rewards of securing gaming platforms and how to better protect gaming communities. The post Securing the gaming culture of cultures appeared first on Microsoft Sec…
Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials acros…
A Single Developer Downloaded a Poisoned VS Code Extension, and Now Look GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a dev…
There is a quiet gap inside many SOCs. It sits between the moment Tier 1 says “this should be escalated” and the moment the response team can actually act on it. Too often, the alert moves forward, bu…
A proof-of-concept (PoC) exploit was published for a new Linux Local Privilege Escalation (LPE) vulnerability dubbed “PinTheft.” Discovered by Aaron Esau of the V12 security team, the flaw allows loca…
A dangerous new Android malware called DevilNFC has emerged, combining NFC relay attacks with a Kiosk Mode trap that locks victims inside a fake banking screen until their card data is stolen. The mal…
Verizon DBIR finds 31% of data breaches began with software flaws last year