CVE-2024-25208

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-25207

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Barangay Population Monitoring System SQL Injection Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A security vulnerability exists in Barangay Population Monitoring System version 1.0, which originates from a SQL injection vulnerability in the file...

CVE-2024-25208

CVE-2024-25208 affects Barangay Population Monitoring System v1.0. A cross-site scripting (XSS) vulnerability exists in the Add Resident function at /barangay-population-monitoring-system/masterlist.php, allowing an attacker to inject a crafted payload via the Full Name parameter to execute arbit...

Grafana Security Vulnerabilities

Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. Grafana has a security vulnerability that stems from inadequate cleanup of path parameters provided by...

Barangay Population Monitoring System Cross-Site Scripting Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System version 1.0, which stems from a cross-site scripting XSS vulnerability in the Add Residen...

CVE-2024-25207

The CVE-2024-25207 entry concerns Barangay Population Monitoring System v1.0, which has a cross-site scripting (XSS) flaw in the Add Resident function (masterlist.php) allowing payloads in the Contact Number field to execute arbitrary scripts. Affected component: Add Resident feature in Barangay ...

PT-2024-20816 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a cross-site scripting XSS vulnerability in the Add Resident function at "/barangay-population-monitoring-system/masterlist.php". This issue allows attackers t...

Barangay Population Monitoring System Cross-Site Scripting Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System version 1.0, which stems from a cross-site scripting XSS vulnerability in the Add Residen...

CVE-2024-25209

Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php...

The vulnerability of the Apache Airflow network software, related to the exposure of protected information, allows attackers to view warnings related to all DAGs in Airflow.

The vulnerability of the Apache Airflow network software relates to the exposure of protected information. Exploiting this vulnerability allows a malicious actor to monitor all DAGs in Airflow...

CVE-2024-25209

CVE-2024-25209 affects Barangay Population Monitoring System 1.0. The vulnerability is a SQL injection in the resident parameter of /endpoint/delete-resident.php. According to connected sources, the issue has a high impact (CVSS v3.1: 9.8, critical) with network attack vector, no user interaction...

TheTruthSpy stalkerware, still insecure, still leaking data

In 2022, we published an article about how photographs of children taken by a stalkerware-type app were found exposed on the internet because of poor cybersecurity practices by the app vendor. The stalkerware-type app involved, TheTruthSpy, has shown once again that the way in which it handles...

Remote Monitoring & Management software used in phishing attacks

Remote Monitoring & Management RMM software, including popular tools like AnyDesk, Atera, and Splashtop, are invaluable for IT administrators today, streamlining tasks and ensuring network integrity from afar. However, these same tools have caught the eye of cybercriminals, who exploit them to...

CVE-2023-41707

Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated...

CVE-2023-41705

Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a...

Cross site request forgery (csrf)

Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a...

Cross site request forgery (csrf)

Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing of user-defined...

CVE-2023-41707

CVE-2023-41707 affects Open-Xchange App Suite. The issue is the unrestricted processing of user-defined mail search expressions, leading to high processing loads and potential availability degradation. Root cause: lack of limits on mail search processing; impact: availability could be reduced (as...

CVE-2023-41707

Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated...