News & Sicurezza

CVE ID :CVE-2026-11519 Published : June 8, 2026, 1:45 p.m. | 48 minutes ago Description :A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_handler.php of the component Account Creation Handler. The manipulation of the argument ROLE results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11518 Published : June 8, 2026, 1:30 p.m. | 1 hour, 3 minutes ago Description :A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More Monday again. The weekend was meant to be quiet. It wasn't. Last week had poisoned packages, a broken AI helper, and a worm tearing through repos. The ugly part: basic tricks still worked. A chatbot g ... Read more Published Date: Jun 08, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article.

CVE ID :CVE-2026-9549 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :Stored cross-site scripting in the service discovery active check output in Checkmk Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-7186 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :Stored cross-site scripting in the URL dashboard widget in Checkmk Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-7765 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :Incorrect authorization in the User Messages dashboard widget in Checkmk Severity: 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-8078 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :Stored cross-site scripting in the global settings change log in Checkmk Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-8833 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A flaw was found in Keycloak. A limited administrator can exploit an improper access control vulnerability in the POST /admin/realms/{realm}/partialImport endpoint. This allows them to bypass Fine-Grained Admin Permissions (FGAP) and escalate their privileges to a full realm administrator by importing users with realm-admin role mappings.

CVE ID :CVE-2026-11515 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The impacted element is an unknown function of the file passsword_reset.php of the component Password Reset Handler. Such manipulation of the argument new_password with the input password123 leads to use of hard-coded password. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11577 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :A flaw was found in Keycloak. A limited administrator can exploit an improper access control vulnerability in the POST /admin/realms/{realm}/partialImport endpoint. This allows them to bypass Fine-Grained Admin Permissions (FGAP) and escalate their privileges to a full realm administrator by importing users with realm-admin role mappings. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11514 Published : June 8, 2026, 1:16 p.m. | 1 hour, 17 minutes ago Description :A flaw has been found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /addpatient.php. This manipulation of the argument admissiontme causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...