CVE-2024-8080

SourceCodester Online Health Care System 1.0 is affected by an SQL injection in search.php (f_name parameter). The vulnerability can be triggered remotely using a crafted input (e.g., 1%' or 1=1 ) UNION SELECT ...), as reported across multiple sources, indicating a high-severity, network-exploit ...

CVE-2024-8080 SourceCodester Online Health Care System search.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument fname with the input 1%' or 1=1 UNION SELECT...

CVE-2024-8080 SourceCodester Online Health Care System search.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument fname with the input 1%' or 1=1 UNION SELECT...

SUSE CVE-2024-43866

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callba...

SourceCodester Online Health Care System SQL注入漏洞

SourceCodester Online Health Care System is a Php-based website builder for online health checkups from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Online Health Care System version 1.0, which is caused by a SQL injection vulnerability in the fname parameter of the...

PT-2024-38791 · Unknown · Sourcecodester Online Health Care System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Health Care System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Health Care System. The issue is related to an unknown function of the file search.php, where the...

GO-2022-0615 Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul...

DEBIAN-CVE-2024-43866

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callba...

AZL-56163 CVE-2024-43866 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callba...

UBUNTU-CVE-2024-43866

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callba...

CVE-2024-43866

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callba...

CVE-2024-43866 net/mlx5: Always drain health in shutdown callback

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callba...

childcare.hhs.texas.gov Cross Site Scripting vulnerability OBB-3957460

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Vulnerabilities fixed in Microsoft Azure components

Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges or impersonate another user. For successful abuse, the malicious party needs prior access to the vulnerable environment, or the malicious part...

CVE-2024-38109

An authenticated attacker can exploit an Server-Side Request Forgery SSRF vulnerability in Microsoft Azure Health Bot to elevate privileges over a network...

CVE-2024-38109

CVE-2024-38109 – Azure Health Bot Elevation of Privilege is an authenticated SSRF vulnerability in Microsoft Azure Health Bot that can allow an attacker to elevate privileges over a network. The vulnerability is documented in Microsoft’s advisory (CVE-2024-38109) and is referenced in multiple fee...

CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability

...

Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service

Cybersecurity researchers have discovered two security flaws in Microsoft's Azure Health Bot Service that, if exploited, could permit a malicious actor to achieve lateral movement within customer environments and access sensitive patient data. The critical issues, now patched by Microsoft, could...

Azure Health Bot Elevation of Privilege Vulnerability

An authenticated attacker can exploit an Server-Side Request Forgery SSRF vulnerability in Microsoft Azure Health Bot to elevate privileges over a network...

PT-2024-5743

Name of the Vulnerable Software and Affected Versions Microsoft Azure Health Bot affected versions not specified Description The issue is related to insufficient validation of incoming requests in Microsoft Azure Health Bot, which can be exploited by an authenticated attacker to elevate privilege...