News & Sicurezza

CVE ID :CVE-2026-4718 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4716 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4708 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4710 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Incorrect boundary conditions in the Audio/Video component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4709 Published : March 24, 2026, 1:16 p.m. | 36 minutes ago Description :Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

High-Severity JSON Schema Flaw Threatens MariaDB Database Stability MariaDB, the widely used open-source relational database and community-developed fork of MySQL, has released critical updates to address a high-severity buffer overflow vulnerability. The flaw, tracke ... Read more Published Date: Mar 24, 2026 (1 day, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-32710 CVE-2026-27212 CVE-2025-7206 CVE-2025-32432

CVE-2026-3055 – Citrix NetScaler Critical SAML IDP Memory Leak March 24, 2026OverviewOn March 23, 2026, Citrix published a security advisory for a critical vulnerability affecting NetScaler ADC and NetScaler Gateway. CVE-2026-3055 is classified as an out-of-bound ... Read more Published Date: Mar 24, 2026 (1 day, 22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-4368 CVE-2026-3055 CVE-2026-21992 CVE-2025-7775 CVE-2025-6543 CVE-2025-5777 CVE-2023-4966

PolyShell Alert: Critical Magento REST API Vulnerability Faces Massive Global Exploitation in the Wild A critical security flaw in the Magento REST API is currently being weaponized by cybercriminals to hijack e-commerce stores globally. Researchers at Sansec have identified a vulnerability they’ve dub ... Read more Published Date: Mar 24, 2026 (1 day, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-32710 CVE-2025-59287 CVE-2025-54236 CVE-2025-32432 CVE-2024-34102

DarkSword Exploit Chain That Can Hack Millions of iPhones Leaked Online A powerful iOS exploit toolkit known as DarkSword has been publicly leaked on GitHub, dramatically lowering the barrier for cybercriminals to target hundreds of millions of iPhones and iPads still run ... Read more Published Date: Mar 24, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2025-43529 CVE-2025-43520 CVE-2025-43510 CVE-2025-14174 CVE-2025-31277

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them to establish reverse shell connections and execute system commands.

Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a crafted MAIL FROM parameter. Attackers can connect to the SMTP service on port 25 and send a malicious MAIL FROM command with an oversized buffer to overwrite the EIP register and execute a bind shell payload.

eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET requests to banners.php with crafted SQL payloads in the bid parameter to extract sensitive database information from the INFORMATION_SCHEMA tables.