News & Sicurezza

CVE ID : CVE-2026-3153 Published : Feb. 25, 2026, 6:16 a.m. | 2 hours, 51 minutes ago Description : A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3152 Published : Feb. 25, 2026, 6:16 a.m. | 2 hours, 51 minutes ago Description : A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacher_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3163 Published : Feb. 25, 2026, 6:16 a.m. | 4 hours, 51 minutes ago Description : A vulnerability has been found in SourceCodester Website Link Extractor 1.0. This vulnerability affects the function file_get_contents of the component URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3151 Published : Feb. 25, 2026, 6:16 a.m. | 2 hours, 51 minutes ago Description : A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25785 Published : Feb. 25, 2026, 6:16 a.m. | 2 hours, 51 minutes ago Description : Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary files and execute arbitrary code on the affected system. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Threat Actors Exploit Apache ActiveMQ Server Vulnerability to Gain RDP Access and Deploy LockBit Ransomware A critical vulnerability in Apache ActiveMQ has been actively exploited by threat actors, leading to a full LockBit ransomware deployment across an enterprise network. Attackers leveraged CVE-2023-466 ... Read more Published Date: Feb 25, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2023-46604

CISA Confirms Active Exploitation of FileZen CVE-2026-25108 Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a recently disclosed vulnerability in FileZen to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of ... Read more Published Date: Feb 25, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-25108

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

CVE ID : CVE-2026-3148 Published : Feb. 25, 2026, 5:17 a.m. | 3 hours, 50 minutes ago Description : A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Edge systems take the brunt of internet-wide exploitation attempts Internet-facing VPNs, routers, and remote access services absorbed sustained exploitation attempts throughout the second half of 2025, with nearly 3 billion malicious sessions recorded over 162 days. ... Read more Published Date: Feb 25, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2025-55182 CVE-2020-2034

27-Year-Old Telnet Flaw Resurfaces to Grant Attackers Instant Root Access A new technical analysis by security researcher Justin Swartz reveals that a critical vulnerability first identified in the late 1990s has resurfaced in modern systems, allowing remote attackers to by ... Read more Published Date: Feb 25, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article.

Death of the XSS Bug? Firefox 148 Debuts the Sanitizer API to Neutralize Malicious Scripts Cross-site scripting (XSS) has haunted web developers for decades, consistently ranking as one of the most pervasive and difficult-to-neutralize vulnerabilities on the internet. However, a major shift ... Read more Published Date: Feb 25, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2025-14321