News & Sicurezza

Email Under Siege: Storm-2603 Exploits SmarterMail to Deploy Warlock Ransomware A new report from ReliaQuest has uncovered a dangerous alliance between a China-based threat actor and a known ransomware strain. The group, identified as Storm-2603, has been caught actively exploiti ... Read more Published Date: Feb 13, 2026 (3 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-24858 CVE-2026-21509 CVE-2026-24423 CVE-2026-23760 CVE-2025-52691 CVE-2025-58034 CVE-2025-53690 CVE-2025-24983 CVE-2024-11120 CVE-2024-47575

CVE ID : CVE-2025-9293 Published : Feb. 13, 2026, 2:16 a.m. | 10 hours, 12 minutes ago Description : A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-9292 Published : Feb. 13, 2026, 2:16 a.m. | 10 hours, 12 minutes ago Description : A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required. Severity: 2.0 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Back to the Future: SSHStalker Botnet Revives 2009 Tactics to Hijack Linux Servers Image: Flare A previously undocumented Linux botnet has been discovered prowling the internet, using a mix of ancient tactics and modern automation to compromise servers. Dubbed SSHStalker by research ... Read more Published Date: Feb 13, 2026 (3 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-24858 CVE-2026-21509 CVE-2025-38352

CVE ID : CVE-2024-21961 Published : Feb. 13, 2026, 12:16 a.m. | 10 hours, 13 minutes ago Description : Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial of service attack against the host resulting in loss of availability. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-40905 Published : Feb. 13, 2026, 12:16 a.m. | 10 hours, 13 minutes ago Description : WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-70092 Published : Feb. 12, 2026, 11:16 p.m. | 11 hours, 13 minutes ago Description : A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Name parameter. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26188 Published : Feb. 12, 2026, 11:16 p.m. | 11 hours, 13 minutes ago Description : Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject arbitrary HTML/JS into the Craft Control Panel (CP) builder and integrations views. User-controlled form labels and integration metadata are rendered with dangerouslySetInnerHTML without sanitization, leading to stored XSS that executes when any admin views the builder/integration screens. This vulnerability is fixed in 5.14.7. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

ClamAV ClamBC bytecode interpreter contains a vulnerability in function name processing that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine.

Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint. Attackers can trigger 100% CPU load by sending multiple concurrent requests to the /api.php endpoint with crafted parameters.

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash.

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.