News & Sicurezza

PoC Exploit Released for Windows Error Reporting ALPC Privilege Escalation PoC Exploit Released Windows Error Reporting ALPC Privilege Escalation A critical local privilege escalation (LPE) vulnerability affecting Microsoft Windows has recently come to light following the pu ... Read more Published Date: Mar 02, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20817

MSHTML Framework 0-Day Exploited by APT28 Hackers Before Feb 2026’s Patch Tuesday Update MSHTML Framework 0-Day Exploited by APT28 A zero-day vulnerability in the Microsoft HTML (MSHTML) framework was actively exploited in the wild. The vulnerability, tracked as CVE-2026-21513, allows att ... Read more Published Date: Mar 02, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-21513

IPFire ships its 200th core update with a new domain blocklist and kernel upgrade Network firewall distribution IPFire released Core Update 200, marking the 200th incremental update to the 2.29 branch. The release bundles a kernel upgrade, a beta domain blocklist service, security ... Read more Published Date: Mar 02, 2026 (23 hours, 56 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-22796 CVE-2026-22795 CVE-2025-69421 CVE-2025-69420 CVE-2025-69419 CVE-2025-69418 CVE-2025-68160 CVE-2025-66199 CVE-2025-15469 CVE-2025-15468 CVE-2025-15467 CVE-2025-11187 CVE-2025-15281 CVE-2026-0915 CVE-2026-0861

CVE-2026-3102: macOS ExifTool image-processing vulnerability | Kaspersky official blog MacOS An in-depth analysis of CVE-2026-3102, a vulnerability posing a potential threat to anyone processing images on a Mac. GReAT March 2, 2026 Can a computer be infected with malware simply by proce ... Read more Published Date: Mar 02, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-3102

CVE ID : CVE-2025-50197 Published : March 2, 2026, 3:18 p.m. | 26 minutes ago Description : Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/admin/sub_language_ajax.inc.php via the POST new_language parameter. This issue has been patched in version 1.11.30. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-50196 Published : March 2, 2026, 3:17 p.m. | 27 minutes ago Description : Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstance.php via the POST main_database parameter. This issue has been patched in version 1.11.30. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-50195 Published : March 2, 2026, 3:16 p.m. | 28 minutes ago Description : Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.controller.php. This issue has been patched in version 1.11.30. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-0689 Published : March 2, 2026, 3:16 p.m. | 28 minutes ago Description : In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve masked sensitive parameters from HTTP responses. Although credentials appear redacted in the user interface, the application returns the underlying credential values in the HTTP response, enabling an authorized administrator to recover stored secrets that may exceed their intended access. We would like to thank the Lockheed Martin Red Team for responsibly reporting this issue and working with us through coordinated disclosure. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26695 Published : March 2, 2026, 3:16 p.m. | 28 minutes ago Description : code-projects Simple Student Alumni System code-projects v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26696 Published : March 2, 2026, 3:16 p.m. | 28 minutes ago Description : code-projects Simple Student Alumni System code-projects v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26702 Published : March 2, 2026, 3:16 p.m. | 28 minutes ago Description : sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26703 Published : March 2, 2026, 3:16 p.m. | 28 minutes ago Description : sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...