News & Sicurezza

Critical ExifTool Flaw Lets Malicious Images Trigger Code Execution on macOS ExifTool Flaw Malicious Images Trigger Code Execution on macOS A newly discovered vulnerability is challenging the long-held belief that macOS systems are inherently immune to malware. Security resear ... Read more Published Date: Mar 09, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3102

Hikvision Multiple Products Vulnerability Allows Malicious Users to Escalate Privileges Hikvision Multiple Products Vulnerability A severe vulnerability affecting multiple Hikvision products was added to the Known Exploited Vulnerabilities (KEV) catalog on March 5, 2026. Tracked globally ... Read more Published Date: Mar 09, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2017-7921

CVE ID :CVE-2025-41763 Published : March 9, 2026, 8:17 a.m. | 57 minutes ago Description :A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-41762 Published : March 9, 2026, 8:17 a.m. | 57 minutes ago Description :An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates. Severity: 6.2 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-41760 Published : March 9, 2026, 8:16 a.m. | 58 minutes ago Description :An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all network traffic to pass unfiltered. Severity: 4.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-41759 Published : March 9, 2026, 8:16 a.m. | 58 minutes ago Description :An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 which results in no networks being blocked at all. Severity: 4.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.

A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Performing a manipulation of the argument webSiteId results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

ClipXDaemon Malware, a Stealthy Cryptocurrency Clipboard Hijacker on Linux Security researchers have identified a new Linux malware strain called ClipXDaemon, a stealthy threat designed to target cryptocurrency users by manipulating copied wallet addresses. Cyble’s Research ... Read more Published Date: Mar 09, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article.

CISA Warns of macOS and iOS Vulnerabilities Exploited in Attacks CISA Warns macOS and iOS Vulnerabilities Exploit The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding multiple Apple vulnerabilities currently facing activ ... Read more Published Date: Mar 09, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2023-43000 CVE-2023-41974 CVE-2021-30952

EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.