Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking bsc1232823...

Mozilla Thunderbird < 115.18

The version of Thunderbird installed on the remote Windows host is prior to 115.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-70 advisory. - Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XS...

Mozilla Thunderbird < 115.18

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-70 advisory. - Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and...

GHSA-CWQ6-MJMX-47P6

creationtimestamp| type| source ---|---|--- 2024-12-12 19:03:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113641404902137205...

CVE-2024-12312

creationtimestamp| type| source ---|---|--- 2024-12-12 07:06:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113638584212194781 2024-12-12 08:48:50+00:00| seen| https://t.me/cvedetector/12746...

CVE-2024-12497

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12497

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-54510

creationtimestamp| type| source ---|---|--- 2024-12-12 00:44:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113637081216993908 2024-12-12 03:47:00+00:00| seen| https://t.me/cvedetector/12676...

CVE-2024-54491: Undefined Security Weakness

The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. A malicious application may be able to determine a user's current location...

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from the parameter adminusername in the file...

CVE-2024-12497: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12497

CVE-2024-12497 affects 1000 Projects Attendance Tracking Management System 1.0. The vulnerability is an SQL injection in the file /admin/check_admin_login.php via the admin_user_name parameter. It can be triggered remotely and an exploit has been disclosed publicly. No remediation details are pro...

CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-37401

creationtimestamp| type| source ---|---|--- 2024-12-11 18:57:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113635719760148469 2024-12-11 19:02:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113635736547254863 2024-12-24 12:43:37+00:00| seen|...

GHSA-X794-564W-VGXX

creationtimestamp| type| source ---|---|--- 2024-12-11 17:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113635295248950416...

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

CVE-2024-12294

creationtimestamp| type| source ---|---|--- 2024-12-11 11:02:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113633848469166263 2024-12-11 12:43:59+00:00| seen| https://t.me/cvedetector/12629 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18...

PT-2025-13868

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sonoma versions prior to 14.7.5 Description The issue was addressed with improved handling of protocols. An attacker in a privileged network position can track a user's activity. Recommendations For...

Security Vulnerabilities fixed in Thunderbird 115.18 — Mozilla

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. Enhanced Tracking Protection's Strict...