News & Sicurezza

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVE ID : CVE-2026-2198 Published : Feb. 9, 2026, 1:16 a.m. | 2 hours, 3 minutes ago Description : A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2199 Published : Feb. 9, 2026, 1:16 a.m. | 2 hours, 3 minutes ago Description : A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

CVE ID : CVE-2026-2196 Published : Feb. 9, 2026, 1:16 a.m. | 2 hours, 3 minutes ago Description : A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2197 Published : Feb. 9, 2026, 1:16 a.m. | 2 hours, 3 minutes ago Description : A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Speed of Truth: X Trials “Collaborative Notes” to Supercharge Fact-Checking with Grok AI Since the acquisition of Twitter by Elon Musk and its subsequent transformation into X, Community Notes has emerged as the platform’s quintessential bulwark against misinformation and deceptive narrat ... Read more Published Date: Feb 09, 2026 (21 hours, 56 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-54143

Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover A quartet of critical vulnerabilities has been discovered in SandboxJS, a library designed to isolate and secure JavaScript execution. The flaws, tracked as CVE-2026-25520, CVE-2026-25586, CVE-2026-25 ... Read more Published Date: Feb 09, 2026 (22 hours, 8 minutes ago) Vulnerabilities has been mentioned in this article.

The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads Functions of seven DKnife components | Image: Cisco Talos A powerful new cyber weapon has been discovered lurking in routers and edge devices, capable of monitoring traffic, hijacking downloads, and d ... Read more Published Date: Feb 09, 2026 (20 hours, 16 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2025-59287

“JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit Countries targeted by TGR-STA-1030 reconnaissance between November and December 2025 | Image: Unit 42 A massive, state-aligned cyber espionage campaign has quietly infiltrated government networks acro ... Read more Published Date: Feb 09, 2026 (18 hours, 22 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-56615 CVE-2024-56614 CVE-2023-39191 CVE-2022-23222