cyberintel.kalymoon.com · 35389 articles · updated every 4 hours · grows forever
A vulnerability was found in RsyncProject rsync up to 3.4.2 and classified as problematic . Affected by this issue is the function establish_proxy_connection of the file socket.c of the component Envi…
A vulnerability was found in RsyncProject rsync up to 3.4.2 . It has been classified as problematic . This affects an unknown part of the component Exported Rsync Module . The manipulation leads to ti…
A vulnerability was found in TriliumNext Trilium up to 0.102.1 . It has been declared as problematic . This vulnerability affects unknown code. The manipulation results in clickjacking. This vulnerabi…
A vulnerability was found in SigmaPlugin Advanced Database Cleaner Plugin up to 4.1.0 on WordPress. It has been rated as critical . This issue affects some unknown processing. This manipulation of the…
A vulnerability categorized as problematic has been discovered in smub All in One SEO Plugin up to 4.9.7 on WordPress. Impacted is the function wp_localize_script . Such manipulation leads to informat…
A vulnerability identified as critical has been detected in Talend Administration Center . The affected element is an unknown function. Performing a manipulation results in improper access controls. T…
A vulnerability labeled as problematic has been found in Talend Administration Center . The impacted element is an unknown function. Executing a manipulation can lead to cross site scripting. This vul…
A vulnerability marked as critical has been reported in smub NextGEN Gallery Plugin up to 4.2.0 on WordPress. This affects an unknown function of the file /imagely/v1/images/ . The manipulation leads …
A vulnerability described as problematic has been identified in Decent Comments Plugin up to 3.0.1 on WordPress. This impacts an unknown function of the component REST API Endpoint . The manipulation …
A vulnerability classified as critical has been found in Six Apart Movable Type, Movable Type Advanced and Movable Type Premium . Affected is an unknown function. This manipulation causes missing auth…
A vulnerability classified as problematic was found in wupsales AI Chatbot & Workflow Automation by AIWU Plugin up to 1.4.14 on WordPress. Affected by this vulnerability is an unknown functionality of…
A vulnerability, which was classified as problematic , has been found in memcached up to 1.6.41 . Affected by this issue is the function sasl_server_userdb_checkpass . Performing a manipulation result…
A vulnerability, which was classified as problematic , was found in memcached up to 1.6.41 . This affects the function sasl_server_userdb_checkpass . Executing a manipulation can lead to observable ti…
A vulnerability has been found in Email Encoder Plugin up to 2.4.6 on WordPress and classified as problematic . This vulnerability affects unknown code. The manipulation leads to cross site scripting.…
A proof-of-concept (PoC) exploit has been publicly released for CVE-2026-2005, a critical remote code execution (RCE) vulnerability affecting PostgreSQL’s pgcrypto extension. The flaw, rooted in legac…
GitHub has confirmed unauthorized access to its internal repositories after detecting a compromised employee device infected through a malicious Visual Studio Code extension, the company disclosed in …
In this Help Net Security video, Colin Constable, CTO at Atsign, explains why your identity provider (IdP) has become the kill chain in cyberattacks. Attackers steal session cookies, tokens, or consen…
In 2025, trusted Git hosting platforms became a playground for cyber criminals. This is the main conclusion from the latest “DevOps Threat Unwrapped Report 2026” by GitProtect. If you want to effectiv…
Large language models in operational roles query telemetry, propose configuration changes, and in some deployments execute those changes against live infrastructure. Ticket drafting and alert summariz…
Dependency vulnerability scanning in JavaScript and TypeScript projects has long sat at the end of the development pipeline. Pull requests get opened, continuous integration runs, and a security scann…
In this Help Net Security interview, Nick Nieuwenhuis, Cybersecurity Architect at Nedscaper, explains why cybersecurity has not delivered the resilience that decades of investment have promised. He ar…
While the numbers are modest, the crackdown on cybercrime involved 13 countries in the MENA region, the largest law enforcement collaboration to date.
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform's source code and internal organization…
Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It said the scope of the incident is limit…