News & Sicurezza

Aanvallers laten SolarWinds Serv-U FTP-servers via nieuw lek crashen Aanvallers maken actief misbruik van een nieuw beveiligingslek in SolarWinds Serv-U om FTP-servers te laten crashen, zo waarschuwt het Amerikaanse cyberagentschap CISA. Een hotfix is sinds 3 juni besc ... Read more Published Date: Jun 08, 2026 (1 day, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-28318

A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVE ID :CVE-2026-11490 Published : June 8, 2026, 7:16 a.m. | 3 hours, 17 minutes ago Description :A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-41724 Published : June 8, 2026, 9:16 a.m. | 3 hours, 16 minutes ago Description :VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations. Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-41723 Published : June 8, 2026, 9:16 a.m. | 3 hours, 16 minutes ago Description :VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations. Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-41722 Published : June 8, 2026, 9:16 a.m. | 3 hours, 17 minutes ago Description :VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations. Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Cisco Warns of Active Exploitation of Catalyst SD-WAN Flaw With No Patch Available Cisco has issued an urgent warning that a high-severity vulnerability in its Catalyst SD-WAN Manager platform is being actively exploited in the wild—and no patch exists yet. CVE-2026-20245 allows aut ... Read more Published Date: Jun 08, 2026 (1 day, 22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20245 CVE-2025-48595 CVE-2026-20182 CVE-2026-20127 CVE-2024-0132

CVE ID :CVE-2026-11497 Published : June 8, 2026, 9:16 a.m. | 1 hour, 17 minutes ago Description :A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of the file /etc/conf.d/boa/boa.conf of the component Boa Webserver. Such manipulation leads to least privilege violation. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11495 Published : June 8, 2026, 7:16 a.m. | 3 hours, 17 minutes ago Description :A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of the file /Ingredients-Stock/add_stock.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11494 Published : June 8, 2026, 7:16 a.m. | 3 hours, 17 minutes ago Description :A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least privilege violation. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11493 Published : June 8, 2026, 7:16 a.m. | 3 hours, 17 minutes ago Description :A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. Severity: 5.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-11492 Published : June 8, 2026, 7:16 a.m. | 3 hours, 17 minutes ago Description :A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Performing a manipulation results in least privilege violation. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...