News & Sicurezza

CVE ID :CVE-2026-7265 Published : April 28, 2026, 11:16 a.m. | 3 hours ago Description :A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function Category of the file pizza/index.php?page=category. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.

CVE ID :CVE-2026-3323 Published : April 28, 2026, 11:16 a.m. | 3 hours ago Description :An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-7268 Published : April 28, 2026, 12:16 p.m. | 2 hours, 1 minute ago Description :A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category of the file /admin/ajax.php?action=save_category. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-7267 Published : April 28, 2026, 12:16 p.m. | 2 hours, 1 minute ago Description :A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view_prod.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Vulnerabilities in mpGabinet software Vulnerabilities in mpGabinet software CVE ID CVE-2026-40550 Publication date 28 April 2026 Vendor BinSoft Product mpGabinet Vulnerable versions All through 23.12.19 Vulnerability type (CWE) Execution ... Read more Published Date: Apr 28, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-40552 CVE-2026-40551 CVE-2026-40550

Firefox-bug maakt cross-site tracking en Tor-fingerprinting mogelijk Mozilla heeft een kwetsbaarheid in Firefox gedicht waardoor het mogelijk was om gebruikers te fingerprinten. Het beveiligingslek, aangeduid als CVE-2026-6770, bevond zich in IndexedDB. De kwetsbaarhei ... Read more Published Date: Apr 28, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-6770

CVE ID :CVE-2026-7266 Published : April 28, 2026, 12:16 p.m. | 2 hours, 1 minute ago Description :A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_order of the file /admin/ajax.php?action=save_order. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Race Against the Clock: The 10-Minute Window Granting Root RCE in Nginx UI A newly disclosed vulnerability, tracked as CVE-2026-42238, in Nginx UI, the popular web-based manager designed to simplify Nginx clusters with AI assistance and one-click deployments, allows unauthen ... Read more Published Date: Apr 28, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article.

Notepad++ Releases 8.9.4 Patch to Fix String Injection Vulnerability (CVE-2026-3008) in 8.9.3 A vulnerability has been identified in the popular open-source text editor, Notepad++, with the release of CVE-2026-3008. The vulnerability, discovered and reported by CSA under its Responsibility Vul ... Read more Published Date: Apr 28, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3008

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL.

CVE ID :CVE-2026-7279 Published : April 28, 2026, 10:16 a.m. | 4 hours ago Description :AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...