8351 matches found
Medicine Tracking System Security Vulnerability
Medicine Tracking System is a medicine tracking system. A security vulnerability exists in SourceCodester Medicine Tracking System version 1.0 due to a path traversal vulnerability in the parameter page...
CVE-2023-7134: Path Traversal: '../filedir'
A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument page leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to...
PT-2023-32895 · Unknown · Sourcecodester Medicine Tracker System
Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracking System version 1.0 Description: A critical issue affects some unknown processing in the system. The manipulation of the page argument leads to path traversal, specifically '../filedir'. This can be initiated...
CVE-2023-7123 SourceCodester Medicine Tracking System sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...
CVE-2023-7123
CVE-2023-7123 affects SourceCodester Medicine Tracking System 1.0. A SQL injection vulnerability exists in the handling of the /classes/Master.php? f=save_medicine path, enabling manipulation of the id/name/description parameters. The issue is network-exploitable with low attack complexity and no...
This Clever New Idea Could Fix AirTag Stalking While Maximizing Privacy
Apple updated its location-tracking system in an attempt to cut down on AirTag abuse while still preserving privacy. Researchers think they’ve found a better balance...
CVE-2023-7123: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...
Improper Access Control
gitlab:sid is vulnerable of Improper Access Control. The vulnerability due to leak the sentry token by changing the configured URL in the Sentry error tracking settings page. It allow an attacker to leak sentry token under specific circumstances...
CVE-2023-49085
creationtimestamp| type| source ---|---|--- 2023-12-22 18:23:25+00:00| seen| https://t.me/ctinow/158512 2023-12-28 12:41:20+00:00| published-proof-of-concept| https://t.me/ptswarm/195 2023-12-29 21:17:21+00:00| seen| https://t.me/ctinow/160688 2024-02-02 17:02:14+00:00| seen|...
Incorrect fee calculation may lead to borrower overpaying
Lines of code Vulnerability details Summary Fees are incorrectly snapshotted when a new lien is created, potentially leading to a fee overpay. Impact The Particle LAMM protocol tracks fees using the same internal tracking built in Uniswap V3. Positions in Uniswap V3 contain a couple of variables...
OPENSUSE-SU-2023:0411-1 Security update for putty
This update for putty fixes the following issues: putty is updated to release 0.80 Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuTTY...
CVE-2023-42940
A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A user who shares their screen may unintentionally share the incorrect content...
CVE-2023-42940
A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A user who shares their screen may unintentionally share the incorrect content...
CVE-2023-42940
CVE-2023-42940 describes a session rendering issue in macOS Sonoma’s WindowServer where a user sharing a screen could unintentionally expose incorrect content. The issue is fixed in macOS Sonoma 14.2.1 (HT214048). Affected products include macOS Sonoma prior to 14.2.1. Remediation is to update to...
OpenSC: Potential PIN bypass when card tracks its own login state
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...
OpenSC: Potential PIN bypass when card tracks its own login state
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...
dagster-mlflow (>=0.18.0, <=0.18.3), dbx (0.5.0) +13 more potentially affected by CVE-2023-6940 via mlflow (1.26.1)
mlflow PYPI version 1.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.18.0, =0.2.5, =0.0.1, =0.3.3, =0.2.0.dev3, =0.2.0.dev2, =0.40.2.dev25, =0.40.2.dev18, =0.39.1rc2, =3.2.7, =0.0.1, =0.1.2, =0.2.1...
CVE-2023-49897
creationtimestamp| type| source ---|---|--- 2023-12-18 09:41:54+00:00| seen| https://t.me/itsecnews/3861 2023-12-18 10:17:56+00:00| seen| https://t.me/ctinow/155787 2023-12-18 12:17:45+00:00| seen| https://t.me/truesecator/5210 2023-12-21 18:10:03+00:00| seen|...
A week in security (December 11 – December 17)
Last week on Malwarebytes Labs: PikaBot distributed via malicious search ads Chrome starts the countdown to the end of tracking cookies Apple to introduce new feature that makes life harder for iPhone thieves Recently-patched Apache Struts vulnerability used in worldwide attacks ALPHV ransomware...
Chrome starts the countdown to the end of tracking cookies
Google has announced that it will start rolling its Chrome web browsers new Tracking Protection feature from January of 2024. Tracking Protection is part of Google’s Privacy Sandbox initiative to phase out third-party cookies. The Tracking Protection feature aims to disable third-party cookies...