CVE-2024-4733: Deserialization of Untrusted Data

The ShiftController Employee Shift Scheduling plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the hc3session-cookie in versions up to, and including, 4.9.57. This makes it possible for an authenticated attacker with contributor access-level or above to inje...

Europol Hacked? IntelBroker Claims Major Law Enforcement Breach

By Waqas Notorious hacker IntelBroker claims a major data breach at Europol. Allegedly, sensitive data including employee info, source code, and operational documents were compromised. Europol has yet to confirm the breach. Could this expose ongoing investigations and endanger law enforcement...

PT-2024-31988

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A cross-site scripting vulnerability has been found in the /Employee/changepassword.php file. The manipulation of the txtold password, txtnew password, and txtconfirm password...

Prison Management System 跨站脚本漏洞

Prison Management System is a prison management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Prison Management System version 1.0, which originates in /Employee/edit-profile.php and contains unknown code that causes cross-site scripting through the use of the...

PT-2024-31438

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A problematic vulnerability was found in the SourceCodester Prison Management System, affecting the file /Employee/edit-profile.php. The manipulation of the arguments txtfullname,...

CVE-2024-4512: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/edit-profile.php. The manipulation of the argument txtfullname/txtdob/txtaddress/txtqualification/cmddept/cmdemployeetype/txtappointmen...

PT-2024-31354

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A critical issue has been identified, affecting the /Employee/edit-photo.php file. The manipulation of the userImage argument leads to unrestricted upload. This issue can be...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

The Business of Cybersecurity Ownership

Who exactly owns cybersecurity in your organisation? Authored by Sean Vogelenzang Many would say the answer is obvious. It’s the chief information security officer CISO and his or her team, of course. However, it’s not that simple. Sure, the CISO and their team are responsible for setting the...

School Employee Allegedly Framed a Principal With Racist Deepfake Rant

Plus: Google holds off on killing cookies, Samourai Wallet founders get arrested, and GM stops driver surveillance program...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-33247: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-33247

CVE-2024-33247 affects Sourcecodester Employee Task Management System v1.0, with a SQL injection vulnerability in the file/admin page admin-manage-user.php. The vulnerability is documented across multiple sources and targets the admin input handling, but the connected documents provide no public ...

PT-2024-24151 · Code Projects · Code-Projects Simple School Managment System

Name of the Vulnerable Software and Affected Versions: Code-Projects Simple School Management System version 1.0 Description: The issue allows attackers to run arbitrary code via the upload of a crafted file, exploiting a File Upload vulnerability in the function for employees to upload avatars...

PT-2024-25167 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Task Management System version 1.0 Description: The issue allows for SQL Injection via the admin-manage-user.php page. Recommendations: For Employee Task Management System version 1.0, consider restricting access to the...

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

The U.S. Treasury Department's Office of Foreign Assets Control OFAC on Monday sanctioned two firms and four individuals for their involvement in malicious cyber activities on behalf of the Iranian Islamic Revolutionary Guard Corps Cyber Electronic Command IRGC-CEC from at least 2016 to April 202...