CyberIntel ⬡ News
★ Saved ◆ Cyber Reads

// Vulnerabilities & CVEs
Intel Feed

cyberintel.kalymoon.com  ·  10115 articles  ·  updated every 4 hours · grows forever

10115Total
4231Full Text
Jun 29, 2026Latest
◈ Women in Cyber ◉ Threat Intelligence ◎ How-To & Tutorials ⬡ Vulnerabilities & CVEs 🔍 Digital Forensics ◍ Incident Response & DFIR ◆ Security Tools & Reviews ◇ Industry News & Leadership ✉ Email Security 🛡 Active Threats ⚠ Critical CVEs ◐ Insider Threat & DLP ◌ Quantum Computing ◬ AI & Machine Learning
🔥 Trending Topics · Last 48h
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32036 | OpenClaw up to 2026.2.25 Gateway Plugin /api/channels authentication by alternate name (GHSA-mwxv-35wr-4vvj)

A vulnerability categorized as problematic has been discovered in OpenClaw up to 2026.2.25 . This issue affects some unknown processing of the file /api/channels of the component Gateway Plugin . Exec…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33321 | OpenEMR up to 8.0.0.2 server-side request forgery (GHSA-5pc3-2crw-96rv)

A vulnerability identified as critical has been detected in OpenEMR up to 8.0.0.2 . Impacted is an unknown function. The manipulation leads to server-side request forgery. This vulnerability is listed…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32008 | OpenClaw up to 2026.2.20 assertBrowserNavigationAllowed external reference (GHSA-45cg-2683-gfmq)

A vulnerability labeled as problematic has been found in OpenClaw up to 2026.2.20 . The affected element is the function assertBrowserNavigationAllowed . The manipulation results in externally control…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32009 | OpenClaw up to 2026.2.23 Binary /opt/homebrew/bin untrusted search path (GHSA-5gj7-jf77-q2q2)

A vulnerability marked as problematic has been reported in OpenClaw up to 2026.2.23 . The impacted element is an unknown function of the file /opt/homebrew/bin of the component Binary Handler . This m…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32721 | openwrt luci up to 26.072.65753 wireless.js append SSID cross site scripting (GHSA-vvj6-7362-pjrw)

A vulnerability described as problematic has been identified in openwrt luci up to 26.072.65753 . This affects the function append of the file wireless.js . Such manipulation of the argument SSID lead…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33055 | alexcrichton tar-rs up to 0.4.44 type confusion (GHSA-gchp-q4r4-x4ff)

A vulnerability classified as critical has been found in alexcrichton tar-rs up to 0.4.44 . This impacts an unknown function. Performing a manipulation results in type confusion. This vulnerability is…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32016 | OpenClaw up to 2026.2.21 /echo untrusted search path (GHSA-7f4q-9rqh-x36p)

A vulnerability classified as problematic was found in OpenClaw up to 2026.2.21 . Affected is an unknown function of the file /echo . Executing a manipulation can lead to untrusted search path. This v…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32031 | OpenClaw up to 2026.2.25 authentication bypass (GHSA-8j2w-6fmm-m587)

A vulnerability, which was classified as critical , has been found in OpenClaw up to 2026.2.25 . Affected by this vulnerability is an unknown functionality. The manipulation leads to authentication by…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32041 | OpenClaw up to 2026.3.0 missing authentication (GHSA-vpj2-69hf-rppw)

A vulnerability, which was classified as critical , was found in OpenClaw up to 2026.3.0 . Affected by this issue is some unknown functionality. The manipulation results in missing authentication. Thi…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32040 | OpenClaw up to 2026.2.22 mimeType cross site scripting (GHSA-2ww6-868g-2c56)

A vulnerability has been found in OpenClaw up to 2026.2.22 and classified as problematic . This affects an unknown part. This manipulation of the argument mimeType causes cross site scripting. This vu…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-32032 | OpenClaw up to 2026.2.21 Environment Variable SHELL untrusted search path (GHSA-f8mp-vj46-cq8v)

A vulnerability was found in OpenClaw up to 2026.2.21 and classified as problematic . This vulnerability affects unknown code of the component Environment Variable Handler . Such manipulation of the a…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-30924 | autobrr qui up to 1.14.1 cross-domain policy (GHSA-h8vw-ph9r-xpch)

A vulnerability was found in autobrr qui up to 1.14.1 . It has been classified as problematic . This issue affects some unknown processing. Performing a manipulation results in permissive cross-domain…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33057 | mesop-dev mesop up to 1.2.2 ai/sandbox/wsgi_app.py wsgi_app code injection

A vulnerability was found in mesop-dev mesop up to 1.2.2 . It has been declared as critical . Impacted is the function wsgi_app of the file ai/sandbox/wsgi_app.py . Executing a manipulation can lead t…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33056 | alexcrichton tar-rs up to 0.4.44 on Rust Tarball fs::metadata symlink

A vulnerability was found in alexcrichton tar-rs up to 0.4.44 on Rust. It has been rated as critical . The affected element is the function fs::metadata of the component Tarball Handler . The manipula…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33060 | ondata ckan-mcp-server up to 0.4.84 Internal Network Service ckan_package_search base_url server-side request forgery

A vulnerability categorized as critical has been discovered in ondata ckan-mcp-server up to 0.4.84 . The impacted element is the function ckan_package_search of the component Internal Network Service …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-4152 | GIMP JP2 File Parser heap-based overflow

A vulnerability identified as critical has been detected in GIMP . This affects an unknown function of the component JP2 File Parser . This manipulation causes heap-based buffer overflow. This vulnera…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-4150 | GIMP PSD File Parser integer overflow

A vulnerability labeled as critical has been found in GIMP . This impacts an unknown function of the component PSD File Parser . Such manipulation leads to integer overflow. This vulnerability is list…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33397 | angular ssr Relative URL injection

A vulnerability marked as problematic has been reported in angular ssr . Affected is an unknown function of the component Relative URL Handler . Performing a manipulation results in injection. This vu…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-4153 | GIMP PSP File Parser heap-based overflow

A vulnerability described as critical has been identified in GIMP . Affected by this vulnerability is an unknown functionality of the component PSP File Parser . Executing a manipulation can lead to h…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-4154 | GIMP XPM File Parser integer overflow

A vulnerability classified as critical has been found in GIMP . Affected by this issue is some unknown functionality of the component XPM File Parser . The manipulation leads to integer overflow. This…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-4151 | GIMP ANI File Parser integer overflow

A vulnerability classified as critical was found in GIMP . This affects an unknown part of the component ANI File Parser . The manipulation results in integer overflow. This vulnerability is reported …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-4267 | Query Monitor Plugin prior 3.20.4 on WordPress REQUEST_URI cross site scripting

A vulnerability, which was classified as problematic , has been found in Query Monitor Plugin on WordPress. This vulnerability affects unknown code. This manipulation of the argument REQUEST_URI cause…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
CVE-2026-33412 | vim up to 9.2.0201 glob os command injection

A vulnerability, which was classified as critical , was found in vim up to 9.2.0201 . This issue affects the function glob . Such manipulation leads to os command injection. This vulnerability is trad…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 20, 2026
Ni8mare Vulnerability Let Attackers Hijack n8n Servers - Exploit Released and 26,512 Hosts Vulnerable - CyberSecurityNews

Ni8mare Vulnerability Let Attackers Hijack n8n Servers - Exploit Released and 26,512 Hosts Vulnerable CyberSecurityNews

CyberSecurityNews Read →
← Prev 397 / 422 Next →