PT-2024-15620 · Unknown · Code-Projects Online Fir System

Name of the Vulnerable Software and Affected Versions: code-projects Online FIR System version 1.0 Description: A vulnerability was found in the code-projects Online FIR System, affecting an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to...

Online FIR System Cross-Site Scripting Vulnerability

Online FIR System is an online complaint platform. A cross-site scripting vulnerability exists in code-projects Online FIR System version 1.0, which stems from a cross-site scripting vulnerability in the Name/Address parameter of the registercomplaint.php file...

Meta sued over forcing users to pay to stop tracking

Meta is required to get users’ consent in Europe in order to show them targeted ads. For this reason, Meta has to provide European users with a way to opt out of behavioral advertising or face fines totalling $100,000 a day. Behavioral advertising are ads tailored to someone’s browsing habits and...

A week in security (November 13 – November 19)

Last week on Malwarebytes Labs: Signal is testing usernames so you don’t have to share your phone number State of Maine data breach impacts 1.3 million people Credit card skimming on the rise for the holiday shopping season Update now! Microsoft patches 3 actively exploited zero-days Ransomware...

Ransomware Gang Files SEC Complaint

A ransomware gang, annoyed at not being paid, filed an SEC complaint against its victim for not disclosing its security breach within the required four days. This is over the top, but is just another example of the extreme pressure ransomware gangs put on companies after seizing their data. Gangs...

ALPHV/BlackCat Take Extortion Public

Learn more about ALPHV filing a complaint with the Security and Exchange Commission SEC against their victim, which appears to be an attempt to influence MeridianLink to pay the ransom sooner than later...

YouTube's Ad Blocker Detection Believed to Break EU Privacy Law

A complaint filed with the EU’s independent data regulator accuses YouTube of failing to get explicit user permission for its ad blocker detection system, potentially violating the ePrivacy Directive...

YouTube launches “global effort” to block ad blockers

The ongoing struggle between YouTube and ad blockers is turning users into the victims. YouTube has gone all out in its fight against the use of add-ons, extensions and programs that prevent it from serving ads to viewers around the world. It started out as just a small experiment, but it looks...

Amazon's Ring cameras were used to spy on customers

Every single Amazon Ring employee was able to access every single customer video, even when it wasn't necessary for their jobs. Not only that, but the employees--along with workers from a third-party contractor in Ukraine--could also download any of those videos and then save and share them as th...

CVE-2023-2565

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complainttype with the input...

PT-2023-20210 · Sourcecodester · Sourcecodester Multi Language Hotel Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Multi Language Hotel Management Software version 1.0 Description: A problematic issue has been found in the software, affecting the file ajax.php of the component POST Parameter Handler. The manipulation of the complaint type...

Hacking the Layoff Process

My latest book, A Hackers Mind, is filled with stories about the rich and powerful hacking systems, but it was hard to find stories of the hacking by the less powerful. Heres one I just found. An article on how layoffs at big companies work inadvertently suggests an employee hack to avoid being...

Complaint Management System SQL Injection Vulnerability

Complaint Management System is a complaint management system. A SQL injection vulnerability exists in Complaint Management System version 1.0, which stems from a problem in the file users/registration.php, where manipulation of the parameter fullname can lead to sql injection. No details of the...

CVE-2023-2243

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

CVE-2023-2243

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

Sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

CVE-2023-2243 SourceCodester Complaint Management System POST Parameter registration.php sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

CVE-2023-2243

CVE-2023-2243 affects SourceCodester Complaint Management System 1.0, specifically the file users/registration.php in the POST Parameter Handler . The root cause is manipulation of the fullname parameter, enabling SQL injection . The issue is described as exploitable remotely and the exploit has ...

Complaint Management System SQL注入漏洞

Complaint Management System is a complaint management system. A SQL injection vulnerability exists in Complaint Management System version 1.0, which stems from a problem in the file users/registration.php, where manipulation of the parameter fullname can lead to sql injection. No details of the...

Complaint Management System Cross-Site Scripting Vulnerability

Complaint Management System is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System v1.0, which originates in the parameter value of file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php. Lack of effective filtering and...