News & Sicurezza

CVE ID :CVE-2026-36873 Published : April 13, 2026, 1:16 p.m. | 40 minutes ago Description :Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-36919 Published : April 13, 2026, 1:16 p.m. | 40 minutes ago Description :Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-36872 Published : April 13, 2026, 1:16 p.m. | 40 minutes ago Description :Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-36920 Published : April 13, 2026, 1:16 p.m. | 40 minutes ago Description :Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-34476 Published : April 13, 2026, 1:16 p.m. | 40 minutes ago Description :Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Hackers hijacked CPUID downloads, served STX RAT to victims If you tried to download software from CPUID’s website late last week, you might have downloaded malware instead. “Investigations are still ongoing, but it appears that a secondary feature (basically ... Read more Published Date: Apr 13, 2026 (23 hours, 49 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-34621 CVE-2023-36025

Triple Security Advisory Prompts Immediate Upgrade to Apache OpenMeetings Version 9.0.0 Apache OpenMeetings, the open-source suite providing video conferencing, instant messaging, and collaborative document editing, is facing a series of security disclosures that highlight risks to user ... Read more Published Date: Apr 13, 2026 (23 hours, 52 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-35337 CVE-2026-34020 CVE-2026-33266 CVE-2026-33005 CVE-2026-22679 CVE-2026-35616 CVE-2026-5281 CVE-2023-28936

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More Monday is back, and the weekend’s backlog of chaos is officially hitting the fan. We are tracking a critical zero-day that has been quietly living in your PDFs for months, plus some aggressive state-s ... Read more Published Date: Apr 13, 2026 (21 hours, 55 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-0234 CVE-2026-34621 CVE-2026-33784 CVE-2026-5194 CVE-2026-39987 CVE-2026-5445 CVE-2026-5437 CVE-2026-4112 CVE-2026-5173 CVE-2026-1092 CVE-2025-12664 CVE-2026-5873 CVE-2026-5860 CVE-2026-5859 CVE-2026-5858 CVE-2026-23869 CVE-2026-30818 CVE-2026-30815 CVE-2026-1346 CVE-2026-1342 CVE-2026-34078 CVE-2026-31790 CVE-2026-23696 CVE-2026-22683 CVE-2026-34197 CVE-2026-0740 CVE-2026-5709 CVE-2026-5708 CVE-2026-5707 CVE-2026-0049 CVE-2025-48651 CVE-2026-34976 CVE-2026-35616 CVE-2026-4350 CVE-2025-58136 CVE-2026-5281 CVE-2026-33579 CVE-2026-34040 CVE-2026-32922 CVE-2026-1561 CVE-2026-4342 CVE-2026-29059 CVE-2026-1188 CVE-2026-0776 CVE-2026-0775 CVE-2026-20929 CVE-2025-55182 CVE-2025-59528 CVE-2023-46233 CVE-2023-23397

High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6 Apache Storm, the distributed realtime computation system known for processing unbounded streams of data, has released a critical security update. Version 2.8.6 addresses two significant vulnerabiliti ... Read more Published Date: Apr 13, 2026 (22 hours, 38 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-35565 CVE-2026-35337 CVE-2026-22679 CVE-2026-35616 CVE-2026-5281

LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover LiteLLM, the popular open-source library used to provide a unified interface for over 100 Large Language Models (LLMs) like OpenAI and Anthropic, has been hit with a series of critical security disclo ... Read more Published Date: Apr 13, 2026 (20 hours, 54 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-35337 CVE-2026-39987 CVE-2026-22679 CVE-2026-35030 CVE-2026-35029 CVE-2026-35616 CVE-2026-34612 CVE-2026-5281 CVE-2025-41656 CVE-2025-41648 CVE-2025-49596

Adobe finally patches PDF pest after months of abuse Adobe has released a fix for an Acrobat and Reader zero-day that attackers had been exploiting for months. The patch, shipped on April 11, addresses CVE-2026-34621, a critical vulnerability in Acrobat ... Read more Published Date: Apr 13, 2026 (20 hours, 59 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-34621

CVE ID :CVE-2026-6204 Published : April 13, 2026, 11:16 a.m. | 2 hours, 41 minutes ago Description :LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful exploitation requires administrative privileges. Exploitation could result in compromise of the underlying web server. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...