Interning at Rapid7 Prague: Meet Mko

Mkrtich Hovsepyan – most people call him Mko – is an intern at Rapid7’s fast-growing office in Prague. He graduated from the luminous Charles University in Prague, and is currently a first-year master’s student in Artificial Intelligence there. He was in our first impressive crop of interns, and ...

Malicious code in bastion-internship-dependency-confusion-poc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1208 Malicious code in bastion-internship-dependency-confusion-poc (npm)

The package communicates with a domain associated with malicious activity...

CVE-2024-3259

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3259

CVE-2024-3259 affects SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the admin/delete_activity.php file, triggered by manipulating the activity_id parameter. It can be exploited remotely, and public exploits have been disclosed. The issue is docum...

CVE-2024-3259 SourceCodester Internship Portal Management System delete_activity.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3259 SourceCodester Internship Portal Management System delete_activity.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3258

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/addactivity.php. The manipulation of the argument title/description/start/end leads to sql injection. It is possible to initiate...

CVE-2024-3256

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...

CVE-2024-3256

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...

CVE-2024-3258 SourceCodester Internship Portal Management System add_activity.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/addactivity.php. The manipulation of the argument title/description/start/end leads to sql injection. It is possible to initiate...

CVE-2024-3258

CVE-2024-3258 affects SourceCodester Internship Portal Management System 1.0, specifically the admin/add_activity.php file. The issue is a SQL injection via the title/description/start/end parameters, exploitable remotely. Public disclosure exists; multiple sources reference an exploit and public...

CVE-2024-3257

CVE-2024-3257 affects the SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the file admin/edit_activity_query.php , triggered by manipulating the arguments title , description , start , and end . The issue can be exploited remotely and is publicly d...

CVE-2024-3257 SourceCodester Internship Portal Management System edit_activity_query.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The...

CVE-2024-3257 SourceCodester Internship Portal Management System edit_activity_query.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The...

CVE-2024-3256 SourceCodester Internship Portal Management System edit_activity.php sql injection

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...

CVE-2024-3256

CVE-2024-3256 affects SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the admin/edit_activity.php file, triggered by the activity_id parameter. It is exploitable remotely, with public disclosure noted in sources. Multiple feeds (NVD, Red Hat, CVE l...

CVE-2024-3255

A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the file admin/editadminquery.php. The manipulation of the argument username/password/name/adminid leads to sql injection. It is possible to...

CVE-2024-3255

A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the file admin/editadminquery.php. The manipulation of the argument username/password/name/adminid leads to sql injection. It is possible to...

CVE-2024-3255 SourceCodester Internship Portal Management System edit_admin_query.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the file admin/editadminquery.php. The manipulation of the argument username/password/name/adminid leads to sql injection. It is possible to...