CVE-2024-7935

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file print.php. The manipulation of the argument mapid leads to sql injection. The attack may be launched remotely. The explo...

CVE-2024-7933

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been classified as critical. Affected is an unknown function of the file login1.php of the component Backend Login. The manipulation of the argument user leads to sql injection. It is possible to launch the...

CVE-2024-7935

The CVE-2024-7935 entry affects itsourcecode Project Expense Monitoring System 1.0. A vulnerability in the file print.php arises from manipulation of the map_id argument, leading to SQL injection. Exploitation is reported as remote, and an exploit has been disclosed publicly. Multiple connected d...

CVE-2024-7933

The CVE-2024-7933 entry affects itsourcecode Project Expense Monitoring System version 1.0, specifically the Backend Login login1.php component. The root cause is manipulation of the user parameter in login1.php, leading to SQL injection. Severity in the sources ranges from high to critical (NVD/...

itsourcecode Project Expense Monitoring System SQL注入漏洞

itsourcecode Project Expense Monitoring System is a project expense monitoring system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Project Expense Monitoring System, which stems from an unknown function in the file execute.php, where manipulation of the...

itsourcecode Project Expense Monitoring System 安全漏洞

itsourcecode Project Expense Monitoring System is a project expense monitoring system from itsourcecode. A security vulnerability exists in itsourcecode Project Expense Monitoring System version 1.0, which originates from an unknown function in the file login1.php of the component Backend Login,...

itsourcecode Project Expense Monitoring System SQL注入漏洞

itsourcecode Project Expense Monitoring System is a project expense monitoring system from itsourcecode, Inc. A SQL injection vulnerability exists in itsourcecode Project Expense Monitoring System version 1.0, which stems from operations on the parameters start/end/employee that result in SQL...

PT-2024-38699 · Unknown · Itsourcecode Project Expense Monitoring System

Name of the Vulnerable Software and Affected Versions: itsourcecode Project Expense Monitoring System version 1.0 Description: A critical issue has been identified, affecting an unknown functionality of the file execute.php. The manipulation of the code argument leads to sql injection. This issue...

PT-2024-38700 · Unknown · Itsourcecode Project Expense Monitoring System

Name of the Vulnerable Software and Affected Versions: itsourcecode Project Expense Monitoring System version 1.0 Description: A critical issue affects some unknown functionality of the file print.php. The manipulation of the map id argument leads to SQL injection. This issue can be exploited...

PT-2024-38702 · Unknown · Itsourcecode Project Expense Monitoring System

Name of the Vulnerable Software and Affected Versions: itsourcecode Project Expense Monitoring System version 1.0 Description: A critical vulnerability was found in the itsourcecode Project Expense Monitoring System. This issue affects the file printtransfer.php and is related to the manipulation...

PT-2024-38698 · Unknown · Itsourcecode Project Expense Monitoring System

Name of the Vulnerable Software and Affected Versions: itsourcecode Project Expense Monitoring System version 1.0 Description: A critical issue was found in the Backend Login component of the itsourcecode Project Expense Monitoring System. The manipulation of the user argument in the login1.php...

The vulnerability of the Dell Storage Resource Manager and Dell Storage Monitoring and Reporting software agents allows a hacker to intercept an active user session.

The vulnerability of the Dell Storage Resource Manager and Dell Storage Monitoring and Reporting software agents relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to intercept the ongoing user session remotely...

SUSE CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

HHS OIG Report Underscores Challenges of Securing the Cloud

On July 22, 2024, HHS Health and Human Services OIG published a report identifying a need for the Department of Health and Human Services, Office of the Secretary HHS OS to improve key security controls to better protect cloud information systems. The report, while focused on HHS OS, underscores...

Identity Threat Detection and Response Solution Guide

The Emergence of Identity Threat Detection and Response Identity Threat Detection and Response ITDR has emerged as a critical component to effectively detect and respond to identity-based attacks. Threat actors have shown their ability to compromise the identity infrastructure and move laterally...

CVE-2024-7811

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7811 SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7811 SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7811

SourceCodester Daily Expenses Monitoring App 1.0 contains a SQL injection in the /endpoint/delete-expense.php endpoint caused by unsafely handling the expense parameter. The vulnerability can be exploited remotely (network vector) and affects the endpoint regardless of user interaction. Exploitat...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling ASPM A last minute revert in 6.7-final introduced a potential deadlock when enabling ASPM during probe of Qualcomm PCIe controllers as reported by lockdep CVE-2024-26605 In the...