News & Sicurezza

CVE ID : CVE-2026-2960 Published : Feb. 23, 2026, 1:16 a.m. | 7 hours, 49 minutes ago Description : A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Hackers Exploit Critical BeyondTrust Flaw to Deploy VShell and SparkRAT Across Multiple Sectors A critical security flaw in a widely used enterprise access platform is under active attack, prompting urgent warnings from cybersecurity researchers and federal agencies alike. According to a new thr ... Read more Published Date: Feb 23, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-1731 CVE-2024-55591 CVE-2024-12356

Poisoned Pages: Critical Calibre Path Traversal Flaws Expose Readers to RCE Calibre, the highly popular, cross-platform e-book manager utilized by readers worldwide to view, convert, edit, and catalog their digital libraries, is facing a severe security alert. Two critical vu ... Read more Published Date: Feb 23, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-26065 CVE-2026-26064 CVE-2026-2441 CVE-2025-64486

CVE ID : CVE-2026-2963 Published : Feb. 23, 2026, 1:16 a.m. | 7 hours, 49 minutes ago Description : A vulnerability was determined in Jinher OA C6 up to 20260210. This issue affects some unknown processing of the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx. This manipulation of the argument id/offsnum causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection If your web application generates PDF documents on the fly, you might be carrying a critical security risk in your dependency tree. A severe vulnerability has been disclosed in jsPDF, a massive corner ... Read more Published Date: Feb 23, 2026 (1 day, 12 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25755 CVE-2026-2441 CVE-2026-24133 CVE-2025-68428

A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVE ID : CVE-2026-2959 Published : Feb. 23, 2026, 12:16 a.m. | 8 hours, 49 minutes ago Description : A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2958 Published : Feb. 23, 2026, 12:16 a.m. | 6 hours, 49 minutes ago Description : A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2588 Published : Feb. 23, 2026, 12:15 a.m. | 6 hours, 49 minutes ago Description : Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Attacker gets into France's database listing all bank accounts, makes off with 1.2 million records Infosec In Brief An unknown attacker accessed the French government’s database listing every bank account in the country and made off with 1.2 million records. France’s Ministry of Economics, Finance ... Read more Published Date: Feb 22, 2026 (1 day, 12 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1340 CVE-2026-1281

CVE ID : CVE-2026-2957 Published : Feb. 22, 2026, 11:15 p.m. | 7 hours, 49 minutes ago Description : A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteBackup of the file src/main/java/com/tugos/dst/admin/controller/BackupController.java of the component File Handler. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...