News & Sicurezza

CVE ID : CVE-2026-1678 Published : 5. März 2026 07:16 | 29 Minuten ago Description : dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a malicious DNS response can trigger an out-of-bounds write when CONFIG_DNS_RESOLVER is enabled. Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-21786 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URLs. Severity: 3.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28537 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mail2Shell Zero-Click Attack lets Hackers Hijack FreeScout Mail Servers Hackers Hijack FreeScout Mail Servers Researchers have uncovered a critical zero-click vulnerability in FreeScout, a widely used open-source help desk and shared mailbox application. Dubbed “Mail2Shel ... Read more Published Date: Mar 05, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-28289 CVE-2026-27636

Google Releases Emergency Chrome Update to Fix 10 Security Vulnerabilities Google has released a critical security update for Chrome, pushing the Stable channel to version 145.0.7632.159/160 for Windows and Mac, and 145.0.7632.159 for Linux. The update addresses 10 security ... Read more Published Date: Mar 05, 2026 (1 day, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3545 CVE-2026-3544 CVE-2026-3543 CVE-2026-3542 CVE-2026-3541 CVE-2026-3540 CVE-2026-3539 CVE-2026-3538 CVE-2026-3537 CVE-2026-3536

CVE ID : CVE-2026-2418 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-29052 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-29053 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1. Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28134 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28137 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28133 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28135 Published : 5. März 2026 06:16 | 1 Stunde, 28 Minuten ago Description : Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Royal Elementor Addons: from n/a through Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...