PT-2024-16685 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage website.php. The manipulation of the website image argument leads to unrestricted...

The vulnerability of the App Manifest component of the JetBrains YouTrack software environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the App Manifest component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project and task management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Markdown Parsing component of the JetBrains YouTrack software suite for managing projects and tasks allows attackers to perform cross-site scripting attacks.

The vulnerability of the Markdown Parsing component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

CVE-2024-10941

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox 126...

CVE-2024-10941

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox 126...

CVE-2024-10941

CVE-2024-10941 affects Firefox versions prior to 126. The issue is triggered by a malicious website embedding an iframe with a malformed URI, resulting in a browser crash that is described as non-exploitable. Public details consistently reference Firefox

CVE-2024-10941

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox 126...

The vulnerability of the image-sharing function in Jitsi Meet software allows a hacker to upload arbitrary GIF files.

The vulnerability of the image-sharing function in Jitsi Meet software for video conferencing involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to upload arbitrary GIF files using giphy...

Crooks bank on Microsoft’s search engine to phish customers

We identified a new wave of phishing for banking credentials that targets consumers via Microsoft's search engine. A Bing search query for 'Keybank login' currently returns malicious links on the first page, and sometimes as the top search result. We have reported the fraudulent sites to Microsof...

Malicious code in vpsnet-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a6306e16dc768df2420085aa5f4943c50eb1d96ddd9040f840df1b8f7b256b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10308 Malicious code in vpsnet-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a6306e16dc768df2420085aa5f4943c50eb1d96ddd9040f840df1b8f7b256b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-41744 IBM CICS TX Standard cross-site request forgery

IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

WordPress Website price calculator Plugin <= 4.1 is vulnerable to SQL Injection

Software Website price calculator Type Plugin Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51601 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 363bcb5a02a5 Credits LVT-tholv2k Required privilege Contributor...

The vulnerability of the web conference component of the MiCollab collaboration platform allows a attacker to perform cross-site scripting attacks.

The vulnerability of the web conference component of the MiCollab collaboration platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

The vulnerability of the Suite Applications Services package of the MiCollab collaboration platform allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the Suite Applications Services package of the MiCollab collaboration platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, due to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Automattic: Open redirect via redirect_to parameter in tumblr.com

The Tumblr website was affected by an open redirect vulnerability that allowed an attacker to redirect users to a specified URL through the "redirectto" parameter. This vulnerability could have been exploited to conduct phishing attacks or distribute malware...