News & Sicurezza

CVE ID :CVE-2025-69720 Published : March 19, 2026, 3:16 p.m. | 2 hours, 24 minutes ago Description :ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string(). Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

DarkSword: Researchers uncover another iOS exploit kit A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabili ... Read more Published Date: Mar 19, 2026 (1 day, 10 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2025-43529 CVE-2025-43520 CVE-2025-43510 CVE-2025-14174 CVE-2025-31277

Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution The Jenkins project has released a critical security advisory addressing multiple vulnerabilities that could lead to full system compromise. The advisory highlights two high-severity flaws in the Jenk ... Read more Published Date: Mar 19, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-33004 CVE-2026-33003 CVE-2026-33002 CVE-2026-33001 CVE-2026-21570 CVE-2026-0953 CVE-2026-20131 CVE-2026-1868 CVE-2026-20963 CVE-2025-55182 CVE-2023-43495

ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More ThreatsDay Bulletin is back on The Hacker News, and this week feels off in a familiar way. Nothing loud, nothing breaking everything at once. Just a lot of small things that shouldn’t work anymore but ... Read more Published Date: Mar 19, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-71260 CVE-2025-71259 CVE-2025-71258 CVE-2025-71257 CVE-2025-5777 CVE-2024-55591 CVE-2023-4966

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE parameter to achieve remote code execution and fully compromise the application. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.

CVE ID :CVE-2025-71258 Published : March 19, 2026, 2:16 p.m. | 3 hours, 24 minutes ago Description :BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can exploit improper URL validation to perform internal network scanning or interact with internal services, impacting system availability. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-71260 Published : March 19, 2026, 2:16 p.m. | 3 hours, 24 minutes ago Description :BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE parameter to achieve remote code execution and fully compromise the application. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-71259 Published : March 19, 2026, 2:16 p.m. | 3 hours, 24 minutes ago Description :BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound requests from the server. Attackers can exploit insufficient validation of externally supplied resource references to interact with internal services or cause resource exhaustion impacting availability. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls to invoke restricted functionality and gain unauthorized access to application data and modify system resources. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.

High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments Atlassian has sounded the alarm for users of its Bamboo Data Center, uncovering a high-severity Remote Code Execution (RCE) vulnerability that could allow attackers to seize control of development env ... Read more Published Date: Mar 19, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-31938 CVE-2026-21570 CVE-2026-0953 CVE-2026-20131 CVE-2026-20963 CVE-2025-49713 CVE-2025-34067 CVE-2025-6554 CVE-2025-23092 CVE-2025-3248 CVE-2023-22508

Critical Ubiquiti UniFi Vulnerabilities Allow Attackers to Seize Full Control of Underlying Systems Ubiquiti UniFi Vulnerabilities Ubiquiti has disclosed two critical-to-high severity vulnerabilities in its widely deployed UniFi Network Application, including a maximum-severity flaw that could allow ... Read more Published Date: Mar 19, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article.

The Exploit That Arrived in an Email and Left With Your Data The Distinction Nobody Makes Clearly EnoughWhen most practitioners hear “prompt injection,” they picture a user typing malicious instructions directly into a chatbot. “Ignore previous instructions. Re ... Read more Published Date: Mär 19, 2026 (1 Tag, 1 Stunde ago) Vulnerabilities has been mentioned in this article. CVE-2025-59944 CVE-2025-53773 CVE-2025-32711