6009 matches found
CVE-2022-30411
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/viewindividual&id=...
CVE-2022-30412
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/updatestatus.php?id=...
CVE-2022-30412
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection through /ctpms/admin/individuals/update_status.php?id=. The root cause is lack of input filtering/escaping for the id parameter. Evidence in the CVE entries indicates potential impact to confidentiality, integrity and avai...
CVE-2022-30413
The CVE-2022-30413 entry affects Covid-19 Travel Pass Management System v1.0, with a SQL Injection vulnerability in the application module /ctpms/classes/Master.php?f=delete_application. The underlying root cause is lack of input filtering/escaping for the parameter, enabling potentially dangerou...
CVE-2022-30413
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=deleteapplication...
CVE-2022-30414
The CVE-2022-30414 entry concerns Covid-19 Travel Pass Management System v1.0, which is reported to be vulnerable to SQL Injection through the parameter in /ctpms/admin/?page=applications/view_application&id=. The connected records consistently describe an SQL injection vulnerability originating ...
CVE-2022-30414
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/viewapplication&id=...
CVE-2022-30415
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/updatestatus.php?id=...
CVE-2022-30415
CVE-2022-30415 affects Covid-19 Travel Pass Management System v1.0, with a confirmed SQL injection vulnerability in /ctpms/admin/applications/update_status.php?id=. The root cause cited in CNVD/related records is lack of input filtering/escaping, enabling attackers to inject SQL. Multiple sources...
CVE-2022-30417
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manageuser&id=...
CVE-2022-30417
The CVE-2022-30417 entry applies to Covid-19 Travel Pass Management System v1.0 and is caused by a SQL Injection in the parameterized request at ctpms/admin/?page=user/manage_user&id=. The connected documents confirm the vulnerable component is the web application entry point for user management,...
CVE-2022-30408
Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=deleteimg...
CVE-2022-30408
CVE-2022-30408 affects Covid-19 Travel Pass Management System v1.0. The root cause is missing file type validation in /ctpms/classes/Master.php?f=delete_img, allowing an attacker to delete arbitrary files. The issue is evidenced across multiple databases and security trackers (NVD, Red Hat, CNVD,...
Novel ‘Nerbian’ Trojan Uses Advanced Anti-Detection Tricks
A newly discovered and complex remote access trojan RAT is spreading via malicious email campaigns using COVID-19 lures and includes numerous features to evade analysis or detection by researchers, Proofpoint has found. Dubbed Nerbian RAT, the novel malware variant is written in the OS-agnostic G...
College closes down after ransomware attack
Lincoln College, one of the few rural schools in Illinois, said that it will permanently close on Friday, May 13, after 157 years, partly due to the impacts of the COVID-19 pandemic and partly due to a long recovery after a ransomware attack in December 2021. The institution notified the Illinois...
Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe
By Deeba Ahmed The novel Nerbian RAT remote access trojan is currently targeting entities in Spain, Italy, and the United Kingdom.… This is a post from HackRead.com Read the original post: Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe...
Ransomware Deals Deathblow to 157-year-old College
Illinois-based Lincoln College was established during the U.S. Civil War. Since then it has weathered two world wars, the Spanish Flu, the Great Depression, the Great Recession and a devastating fire. But two things it couldn’t survive? A ransomware attack and financial pressures tied to the impa...
Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K.
A previously undocumented remote access trojan RAT written in the Go programming language has been spotted disproportionately targeting entities in Italy, Spain, and the U.K. Called Nerbian RAT by enterprise security firm Proofpoint, the novel malware leverages COVID-19-themed lures to propagate ...
