8692 matches found
Linux kernel 信息泄露漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that originates from a disk/network card front-end data leak...
Ukrainian Authorities Arrested Phishing Gang That Stole 100 Million UAH
The Cyber Police of Ukraine last week disclosed that it apprehended nine members of a criminal gang that embezzled 100 million hryvnias via hundreds of phishing sites that claimed to offer financial assistance to Ukrainian citizens as part of a campaign aimed at capitalizing on the ongoing...
ASB-A-213457638
In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
Library Management System SQL Injection Vulnerability (CNVD-2022-61297)
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...
Library Management System File Upload Vulnerability
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to file uploads due to a lack of validation of uploaded files in the parameter image in the file /card/index.php. The...
CVE-2022-2212
A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...
Library Management System 跨站脚本漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System has a cross-site scripting vulnerability that originates in the file /admin/editadmindetails.php?id= The admin's parameter Name lacks a...
Library Management System 代码问题漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to file uploads due to a lack of validation of uploaded files in the parameter image in the file /card/index.php. The...
Natural Language Processing and “Mindful” AI Drive More Sophisticated Bad Bot Attacks
The evolution from human to bot attacks Over the last several years of my career in cyber security, I have been fortunate to work with professionals who researched and developed new cyber security detection and prevention solutions that block high-end cyber attacks. Initially, these attacks were...
Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign
A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021. To that end, it has come to light that two malware domains identified as hosting credit card skimmer code — "scanalytic.org" and "js.staticounter.net" — are part of a...
MAL-2022-6288 Malicious code in staff-card (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cd9b36285c46be8b1078a99848ecf74d3fd5b473e05f6a8e6ce7789e3c4fd6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in staff-card (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cd9b36285c46be8b1078a99848ecf74d3fd5b473e05f6a8e6ce7789e3c4fd6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in meliuz-card-google (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a3170e3050ed7ea2ab36b585bdb2c516f88c546466b7a6b8986396b35348cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4547 Malicious code in meliuz-card-google (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a3170e3050ed7ea2ab36b585bdb2c516f88c546466b7a6b8986396b35348cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Samsung Internet Autofill Algorithm Vulnerability
Samsung Internet is a browser for Samsung cell phones. A vulnerability in the autofill algorithm exists in versions prior to Samsung Internet 17.0.1.69, which can be exploited by an attacker to guess a stored credit card number...
June 14, 2022—KB5014702 (OS Build 14393.5192) - EXPIRED
None None...
Samsung mobile low-battery dumpstate log information disclosure vulnerability (CNVD-2022-67277)
Samsung mobile is a cell phone from Samsung, South Korea. Samsung mobile low-battery dumpstate log is vulnerable to information disclosure due to a lack of protection of sensitive information in the low-battery dumpstate log. A local attacker could use this vulnerability to obtain SIM card...
Samsung Find My Mobile SimChangeAlertManger Information Disclosure Vulnerability
Samsung Find My Mobile is an application to find a cell phone by the South Korean company Samsung Samsung. An information disclosure vulnerability exists in SimChangeAlertManger, a version prior to Samsung Find My Mobile 7.2.24.12. A local attacker with log access could exploit the vulnerability ...
Samsung Find My Mobile FmmExtraOperation Information Disclosure Vulnerability
Samsung Find My Mobile is an application to find a cell phone by the South Korean company Samsung Samsung. An information disclosure vulnerability exists in Samsung Find My Mobile prior to version 7.2.24.12, FmmExtraOperation. A local attacker with log access could exploit the vulnerability to...