News & Sicurezza

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls to invoke restricted functionality and gain unauthorized access to application data and modify system resources. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.

High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments Atlassian has sounded the alarm for users of its Bamboo Data Center, uncovering a high-severity Remote Code Execution (RCE) vulnerability that could allow attackers to seize control of development env ... Read more Published Date: Mar 19, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-31938 CVE-2026-21570 CVE-2026-0953 CVE-2026-20131 CVE-2026-20963 CVE-2025-49713 CVE-2025-34067 CVE-2025-6554 CVE-2025-23092 CVE-2025-3248 CVE-2023-22508

Critical Ubiquiti UniFi Vulnerabilities Allow Attackers to Seize Full Control of Underlying Systems Ubiquiti UniFi Vulnerabilities Ubiquiti has disclosed two critical-to-high severity vulnerabilities in its widely deployed UniFi Network Application, including a maximum-severity flaw that could allow ... Read more Published Date: Mar 19, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article.

The Exploit That Arrived in an Email and Left With Your Data The Distinction Nobody Makes Clearly EnoughWhen most practitioners hear “prompt injection,” they picture a user typing malicious instructions directly into a chatbot. “Ignore previous instructions. Re ... Read more Published Date: Mär 19, 2026 (1 Tag, 1 Stunde ago) Vulnerabilities has been mentioned in this article. CVE-2025-59944 CVE-2025-53773 CVE-2025-32711

Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps A critical-severity vulnerability has been identified in jsPDF, the popular JavaScript library used by developers worldwide to generate PDF documents directly in the browser. The flaw, designated CVE- ... Read more Published Date: Mär 19, 2026 (1 Tag, 1 Stunde ago) Vulnerabilities has been mentioned in this article.

AI Workflows Under Fire: Critical RCE and File Write Flaws Expose Langflow Servers Security researchers have identified two severe vulnerabilities in Langflow, the popular visual framework for building AI-powered agents. The flaws, which include a “Critical” rated unauthenticated Re ... Read more Published Date: Mar 19, 2026 (23 hours, 47 minutes ago) Vulnerabilities has been mentioned in this article.

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to, and including, 1.6.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database, including usernames, email addresses, and password hashes.

CVE ID :CVE-2026-3511 Published : March 19, 2026, 12:16 p.m. | 3 hours, 23 minutes ago Description :Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Server Side Request Forgery) attacks and obtain unauthorized access to local files on filesystems running the vulnerable application. Successful exploitation requires the victim to visit a specially crafted website that sends request containing a specially crafted XML document to /sign endpoint of the local HTTP server run by the application. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CISA Issues Urgent Warning Following Global Cyberattack on Stryker In a move to protect the nation’s critical infrastructure, the Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert following a significant cyberattack on Stryker Corporation, a ... Read more Published Date: Mar 19, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-0953 CVE-2026-20131 CVE-2026-21509 CVE-2026-20963

CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963) CVE-2026-20963, a remote code execution (RCE) SharePoint vulnerability Microsoft fixed in January 2026, is being exploited by attackers. The confirmation comes from the US Cybersecurity and Infrastruc ... Read more Published Date: Mar 19, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-20963 CVE-2025-53770

Interlock Ransomware Leveraged Cisco FMC Zero-Day 36 Days Before Patch Amazon’s threat intelligence teams have uncovered a new cyber campaign linked to the Interlock ransomware group. The campaign centers around a flaw affecting Cisco Secure Firewall Management Center (F ... Read more Published Date: Mar 19, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-20643 CVE-2026-20131

Apple Patches WebKit Vulnerability CVE-2026-20643 Across iOS, macOS Apple has released a new security update to address a critical WebKit vulnerability tracked as CVE-2026-20643. The vulnerability was identified as a cross-origin issue within the Navigation API of Web ... Read more Published Date: Mar 19, 2026 (23 hours, 25 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-20643 CVE-2023-43010 CVE-2026-20131 CVE-2023-43000 CVE-2024-23222 CVE-2023-41974