ForIP Administração PABX SQL注入漏洞

ForIP Administração PABX is a telephony system from ForIP. A SQL injection vulnerability exists in ForIP Administração PABX version 1.x. The vulnerability stems from the manipulation of the parameter user in the /authMonitCallcenter file of the Component Monitoring Center can lead to SQL injectio...

PT-2024-27448 · Elastic · Apm Server

Name of the Vulnerable Software and Affected Versions: Elastic APM Server versions prior to 8.14.0 Description: The issue concerns the logging of sensitive data by the APM server due to a flaw related to unavailable shards exception. When a bulk index request partially fails, the APM server logs...

Enhance Your Cybersecurity Posture: Qualys Tackles CISA & NSA’s Top 10 Misconfigurations

The National Security Agency NSA alongside the Cybersecurity and Infrastructure Security Agency CISA have pinpointed the most critical misconfigurations that present substantial dangers to organizations. In particular, the advisory calls out the tactics, techniques, and procedures TTPs actors use...

USN-6895-4: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6895-4)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6895-4 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

CVE-2024-7366

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to...

CVE-2024-7366

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to...

CVE-2024-7366

The CVE-2024-7366 vulnerability affects SourceCodester Tracking Monitoring Management System 1.0, specifically the Login component (file /ajax.php?action=login). The issue arises from unsafely handling the username parameter, leading to an SQL injection. It is exploitable remotely and the exploit...

CVE-2024-7366 SourceCodester Tracking Monitoring Management System Login ajax.php sql injection

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to...

CVE-2024-7364

A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managerecords.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-7364

A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managerecords.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-7365 SourceCodester Tracking Monitoring Management System manage_establishment.php sql injection

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manageestablishment.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-7365 SourceCodester Tracking Monitoring Management System manage_establishment.php sql injection

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manageestablishment.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-7364

CVE-2024-7364 affects SourceCodester Tracking Monitoring Management System 1.0. The vulnerability is a SQL injection in the /manage_records.php file triggered by manipulating the id parameter, with remote exploitation. Multiple connected sources confirm this same issue and note the exploit has be...

CVE-2024-7364 SourceCodester Tracking Monitoring Management System manage_records.php sql injection

A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managerecords.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-7364 SourceCodester Tracking Monitoring Management System manage_records.php sql injection

A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managerecords.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-7362

A vulnerability, which was classified as critical, has been found in SourceCodester Tracking Monitoring Management System 1.0. This issue affects some unknown processing of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely...

CVE-2024-7362

A vulnerability, which was classified as critical, has been found in SourceCodester Tracking Monitoring Management System 1.0. This issue affects some unknown processing of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely...

CVE-2024-7363 SourceCodester Tracking Monitoring Management System manage_person.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Tracking Monitoring Management System 1.0. Affected is an unknown function of the file /manageperson.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-7363

CVE-2024-7363 affects SourceCodester Tracking Monitoring Management System 1.0. The vulnerability is an SQL injection in the /manage_person.php file caused by manipulation of the id parameter. It can be exploited remotely; exploits have been disclosed publicly. The connected documents do not prov...