864 matches found
CVE-2024-10734
CVE-2024-10734 affects Project Worlds Life Insurance Management System v1.0. A vulnerability in /editPayment.php where the recipt_no parameter can be manipulated to trigger SQL injection. Exploitation is possible remotely, and public exploit information exists. The issue impacts confidentiality, ...
CVE-2024-10734 Project Worlds Life Insurance Management System editPayment.php sql injection
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-10734 Project Worlds Life Insurance Management System editPayment.php sql injection
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...
Project Worlds Life Insurance Management System SQL注入漏洞
Project Worlds Life Insurance Management System is a life insurance management system from Project Worlds, Inc. A SQL injection vulnerability exists in Project Worlds Life Insurance Management System version 1.0, which stems from the fact that incorrect manipulation of the parameter nomineeid can...
Project Worlds Life Insurance Management System 安全漏洞
Project Worlds Life Insurance Management System is a life insurance management system from Project Worlds, Inc. A security vulnerability exists in Project Worlds Life Insurance Management System version 1.0, which stems from an incorrect manipulation of the parameter reciptno that can lead to SQL...
Change Healthcare Breach Hits 100M Americans
Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information. Image: Tamer Tuncay,...
A week in security (October 7 – October 13)
Last week on Malwarebytes Labs: Modern TVs have "unprecedented capabilities for surveillance and manipulation," group reveals Internet Archive suffers data breach and DDoS Google Search user interface: A/B testing shows security concerns remain AI girlfriend site breached, user fantasies stolen...
GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks
A new tax-themed malware campaign targeting insurance and finance sectors has been observed leveraging GitHub links in phishing email messages as a way to bypass security measures and deliver Remcos RAT, indicating that the method is gaining traction among threat actors. "In this campaign,...
Blind Eagle Targets Colombian Insurance Sector with Customized Quasar RAT
The Colombian insurance sector is the target of a threat actor tracked as Blind Eagle with the end goal of delivering a customized version of a known commodity remote access trojan RAT referred to as Quasar RAT since June 2024. "Attacks have originated with phishing emails impersonating the...
Planned Parenthood partly offline after ransomware attack
In late August, Intermountain Planned Parenthood of Montana suffered a cyberattack which is still under investigation. The attack has been claimed by a ransomware group. Intermountain Planned Parenthood Inc., doing business as Planned Parenthood Of Montana, is a nonprofit organization that provid...
CVE-2024-8414
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2024-8414
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2024-8414 SourceCodester Insurance Management System cross-site request forgery
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2024-8414 SourceCodester Insurance Management System cross-site request forgery
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2024-8414
CVE-2024-8414 affects SourceCodester Insurance Management System 1.0. The vulnerability is a cross-site request forgery (CSRF) in an unknown functionality that can be triggered remotely; the exploit has been disclosed publicly. The provided connected documents confirm CSRF impact but do not speci...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System version 1.0. An attacker exploited the vulnerability to perform a cross-site request forgery attack...
CVE-2024-8216
A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...
CVE-2024-8216
A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...
CVE-2024-8216 nafisulbari/itsourcecode Insurance Management System Payment editPayment.php access control
A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...
CVE-2024-8216 nafisulbari/itsourcecode Insurance Management System Payment editPayment.php access control
A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...