News & Sicurezza

CVE ID : CVE-2025-70821 Published : March 3, 2026, 3:16 p.m. | 2 hours, 28 minutes ago Description : renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-52365 Published : March 3, 2026, 3:16 p.m. | 2 hours, 28 minutes ago Description : A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input passed to os.system(). The vulnerability arises from improper input handling where command-line arguments are directly concatenated into shell commands without validation Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-64736 Published : March 3, 2026, 3:16 p.m. | 2 hours, 28 minutes ago Description : An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (5462afb0). A specially crafted .abf file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-57622 Published : March 3, 2026, 3:16 p.m. | 2 hours, 28 minutes ago Description : An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3343 Published : March 3, 2026, 2:15 p.m. | 1 hour, 28 minutes ago Description : A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link. This vulnerability affects Fireware OS 12.7 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3344 Published : March 3, 2026, 2:15 p.m. | 1 hour, 28 minutes ago Description : A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3342 Published : March 3, 2026, 2:15 p.m. | 1 hour, 28 minutes ago Description : An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Introduction Google Threat Intelligence Group (GTIG) has identified a new and powerful exploit kit targeting Apple iPhone models running iOS version 13.0 (released in September 2019) up to version 17. ... Read more Published Date: Mar 03, 2026 (1 day, 11 hours ago) Vulnerabilities has been mentioned in this article. CVE-2023-43000 CVE-2024-23296 CVE-2024-23225 CVE-2024-23222 CVE-2023-41974 CVE-2022-48503 CVE-2023-38606 CVE-2023-32434 CVE-2023-32409 CVE-2021-30952 CVE-2020-27950 CVE-2020-27932

Introducing the 2026 Cloudflare Threat Report Introducing the 2026 Cloudflare Threat Report2026-03-035 min readToday’s threat landscape is more varied and chilling than ever: Sophisticated nation-state actors. Hyper-volumetric DDoS attacks. Deepf ... Read more Published Date: Mar 03, 2026 (1 day, 11 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-22813 CVE-2025-67779 CVE-2025-55184 CVE-2025-55183 CVE-2025-55182

CVE ID : CVE-2026-3351 Published : March 3, 2026, 1:16 p.m. | 2 hours, 28 minutes ago Description : Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server. Severity: 2.1 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3463 Published : March 3, 2026, 12:16 p.m. | 3 hours, 28 minutes ago Description : A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Patch name: 147. It is suggested to install a patch to address this issue. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Langflow’s AI CSV Agent Vulnerability Allows Remote Code Execution Attacks Langflow’s AI CSV Agent Vulnerability A critical vulnerability in a popular AI application platform allows attackers to remotely execute harmful code through its CSV data-processing agent.The vulnerab ... Read more Published Date: Mar 03, 2026 (1 day, 11 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-27966