News & Sicurezza

CVE ID :CVE-2026-3993 Published : March 12, 2026, 6:16 a.m. | 8 hours, 9 minutes ago Description :A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manage_employee_deductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Agentic attack chains advance as infostealers flood criminal markets Cybercriminals spent much of 2025 automating their operations, shifting from one-off attacks to systems that can run entire intrusion cycles with minimal human input. Data collected from criminal foru ... Read more Published Date: Mar 12, 2026 (21 hours, 17 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-55182 CVE-2025-5777 CVE-2025-3248

CVE ID :CVE-2026-2687 Published : March 12, 2026, 6:16 a.m. | 6 hours, 9 minutes ago Description :The Reading progressbar WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-15473 Published : March 12, 2026, 6:16 a.m. | 6 hours, 9 minutes ago Description :The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Chrome Security Update – Patch for 29 Vulnerabilities that Allow Remote Code Execution Chrome Security Update Patch for 29 Vulnerabilities Google has officially released Chrome version 146 to the stable channel, delivering crucial security updates for Windows, Mac, and Linux users. Roll ... Read more Published Date: Mar 12, 2026 (21 hours, 35 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-3924 CVE-2026-3921 CVE-2026-3919 CVE-2026-3918 CVE-2026-3917 CVE-2026-3916 CVE-2026-3915 CVE-2026-3914 CVE-2026-3913

CVE ID :CVE-2026-3992 Published : March 12, 2026, 6:16 a.m. | 8 hours, 9 minutes ago Description :A weakness has been identified in CodeGenieApp serverless-express up to 4.17.1. This affects an unknown part of the file utils/dynamodb.ts of the component Users Endpoint. This manipulation of the argument filter causes injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3990 Published : March 12, 2026, 6:16 a.m. | 8 hours, 9 minutes ago Description :A security flaw has been discovered in CesiumGS CesiumJS up to 1.137.0. Affected by this issue is some unknown functionality of the file Apps/Sandcastle/standalone.html. The manipulation of the argument c results in cross site scripting. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The presence of this vulnerability remains uncertain at this time. The vendor was contacted early about this disclosure but did not respond in any way. According to CVE-2023-48094, "the vendor's position is that Apps/Sandcastle/standalone.html is part of the CesiumGS/cesium GitHub repository, but is demo code that is not part of the CesiumJS JavaScript library product." Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting n8n to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of ac ... Read more Published Date: Mar 12, 2026 (22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21385 CVE-2026-27577 CVE-2026-21513 CVE-2025-68613

A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor_action.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVE ID :CVE-2026-3982 Published : March 12, 2026, 5:16 a.m. | 7 hours, 10 minutes ago Description :A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3981 Published : March 12, 2026, 5:16 a.m. | 5 hours, 9 minutes ago Description :A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor_action.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient_action.php. Such manipulation of the argument patient_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.