CVE-2024-8022 Genexis Tilgin Home Gateway cross site scripting

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been rated as problematic. This issue affects some unknown processing of the file /vood/cgi-bin/voodview.cgi?lang=EN&act=user/specconf&sessionId=86213915328111654515&user=A&message2user=Account%20updated. The...

CVE-2024-8022

CVE-2024-8022 affects Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. The issue is a cross-site scripting vulnerability in the handling of the Phone Number argument of the vood_view.cgi endpoint, enabling remote exploitation. Multiple sources corroborate a public exploit/disclosure. The pract...

Dozens of Google products targeted by scammers via malicious search ads

In a previous blog, we saw criminals distribute malware via malicious ads for Google Authenticator. This time, brazen malvertisers went as far as impersonating Googles entire product line and redirecting victims to a fake Google home page. Clearly not afraid of poking the bear, they even used and...

CVE-2024-40481

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page "message" parameter...

CVE-2024-40484

A Reflected Cross Site Scripting XSS vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

CVE-2024-40481

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page "message" parameter...

CVE-2024-40484

A Reflected Cross Site Scripting XSS vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...

Goati Track 1.0-2023 Insecure Settings

============================================================================================================================================= | Title : Gaati track v1.0-2023 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1...

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Old Age Home Management System, which stems from a stored cross-site scripting XSS vulnerability in the message parameter of the...

Enphase Envoy 安全漏洞

Enphase Envoy is a gateway device for connecting smart home devices from Enphase USA. A security vulnerability exists in Enphase Envoy version 4.x up to and including version 8.2.4225, which stems from the inclusion of a path traversal vulnerability...

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Old Age Home Management System, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the searchdata parameter of...

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Old Age Home Management System v1.0, which originates from an SQL injection vulnerability in the email parameter of the /oahms/admin/forgot-password.ph...

Russian Midnight Blizzard Breached UK Home Office via Microsoft

Russian hacking group Midnight Blizzard breached the UK Home Office, stealing sensitive data. Learn how they exploited supply…...

EUVD-2024-2569

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authentication and additionally the endpoint to update an existing file is susceptible to path traversal...

CVE-2024-42467 CometVisu Backend for openHAB affected by SSRF/XSS

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. In versions 3.4.0.M4 through 4.2.0,, the proxy endpoint of openHAB's CometVisu add-on can be accessed without authentication. This proxy-feature can be exploited as Server-Side...

Security company ADT announces security breach of customer data

Electronic surveillance equipment provider ADT filed a form 8-K with the Security and Exchange Commision SEC to report “a cybersecurity incident during which unauthorized actors illegally accessed certain databases containing ADT customer order information.” An 8-K is a report of unscheduled...

CVE-2024-40481

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page "message" parameter...

CVE-2024-40477

CVE-2024-40477 affects PHPGurukul Old Age Home Management System v1.0. A SQL injection exists in the forgot-password.php endpoint (/oahms/admin/forgot-password.php) via the email parameter, enabling an attacker to execute arbitrary SQL commands. Documented impact is high (data confidentiality, in...