News & Sicurezza

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd. E-Commerce Product allows Reflected XSS.This issue affects E-Commerce Product: through 10122025.

CVE ID : CVE-2025-14343 Published : Feb. 26, 2026, 1:16 p.m. | 3 hours, 54 minutes ago Description : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd. E-Commerce Product allows Reflected XSS.This issue affects E-Commerce Product: through 10122025. Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

New Claude Code Enables Remote Control of Your Terminal Session From Your Phone Claude Code Remote Control From Phone Anthropic has launched a new “Remote Control” feature for its agentic terminal tool, Claude Code. His capability allows developers to start tasks in their local t ... Read more Published Date: Feb 26, 2026 (3 days, 12 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-59536

CVE ID : CVE-2026-2680 Published : Feb. 26, 2026, 1:16 p.m. | 5 hours, 54 minutes ago Description : Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2679 Published : Feb. 26, 2026, 1:16 p.m. | 3 hours, 54 minutes ago Description : Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2678 Published : Feb. 26, 2026, 1:16 p.m. | 3 hours, 54 minutes ago Description : Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2677 Published : Feb. 26, 2026, 1:16 p.m. | 3 hours, 54 minutes ago Description : Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1198 Published : Feb. 26, 2026, 12:15 p.m. | 4 hours, 54 minutes ago Description : SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]_u06. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Vulnerability in Omega-PSIR software Vulnerability in Omega-PSIR software CVE ID CVE-2026-1434 Publication date 26 February 2026 Vendor Politechnika Warszawska Product Omega-PSIR Vulnerable versions From 4.5.9 through 4.6.6 Vulnerability ... Read more Published Date: Feb 26, 2026 (2 days, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1434

Five Eyes warn: Patch your Cisco SD-WAN or risk root takeover The Five Eyes intelligence alliance is urgently warning defenders to patch two Cisco Catalyst SD-WAN vulnerabilities used in attacks. First discovered by the Australian Signals Directorate (ASD), all ... Read more Published Date: Feb 26, 2026 (2 days, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127 CVE-2022-20775

Vulnerability in Simple.ERP software Vulnerability in Simple.ERP software CVE ID CVE-2026-1198 Publication date 26 February 2026 Vendor Simple SA Product Simple.ERP Vulnerable versions All before [email protected]_u06 Vulnerability type (CWE) I ... Read more Published Date: Feb 26, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1198

CVE ID : CVE-2025-64999 Published : Feb. 26, 2026, 11:16 a.m. | 5 hours, 54 minutes ago Description : Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...