News & Sicurezza

CVE ID :CVE-2026-4710 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Incorrect boundary conditions in the Audio/Video component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4709 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

High-Severity JSON Schema Flaw Threatens MariaDB Database Stability MariaDB, the widely used open-source relational database and community-developed fork of MySQL, has released critical updates to address a high-severity buffer overflow vulnerability. The flaw, tracke ... Read more Published Date: Mar 24, 2026 (1 day, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-32710 CVE-2026-27212 CVE-2025-7206 CVE-2025-32432

CVE-2026-3055 – Citrix NetScaler Critical SAML IDP Memory Leak March 24, 2026OverviewOn March 23, 2026, Citrix published a security advisory for a critical vulnerability affecting NetScaler ADC and NetScaler Gateway. CVE-2026-3055 is classified as an out-of-bound ... Read more Published Date: Mar 24, 2026 (1 day, 22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-4368 CVE-2026-3055 CVE-2026-21992 CVE-2025-7775 CVE-2025-6543 CVE-2025-5777 CVE-2023-4966

PolyShell Alert: Critical Magento REST API Vulnerability Faces Massive Global Exploitation in the Wild A critical security flaw in the Magento REST API is currently being weaponized by cybercriminals to hijack e-commerce stores globally. Researchers at Sansec have identified a vulnerability they’ve dub ... Read more Published Date: Mar 24, 2026 (1 day, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-32710 CVE-2025-59287 CVE-2025-54236 CVE-2025-32432 CVE-2024-34102

DarkSword Exploit Chain That Can Hack Millions of iPhones Leaked Online A powerful iOS exploit toolkit known as DarkSword has been publicly leaked on GitHub, dramatically lowering the barrier for cybercriminals to target hundreds of millions of iPhones and iPads still run ... Read more Published Date: Mar 24, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2025-43529 CVE-2025-43520 CVE-2025-43510 CVE-2025-14174 CVE-2025-31277

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them to establish reverse shell connections and execute system commands.

Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a crafted MAIL FROM parameter. Attackers can connect to the SMTP service on port 25 and send a malicious MAIL FROM command with an oversized buffer to overwrite the EIP register and execute a bind shell payload.

eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET requests to banners.php with crafted SQL payloads in the bid parameter to extract sensitive database information from the INFORMATION_SCHEMA tables.

Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can inject SQL payloads into the thread_id parameter of forum-thread.php, the subject parameter of contact-submit.php, the post-id parameter of post-new-submit.php, and the thread-id parameter to extract sensitive database information or cause denial of service.

Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter. Attackers can send POST requests to index.php with malicious email values in the forgotten_password module to extract sensitive database information.

Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters. Attackers can inject SQL code using XOR-based payloads in GET requests to portalLogin.php to extract sensitive database information or cause denial of service through time-based attacks.