log4j

Log4j version 1.2.17-aims This jar was created to protect against CVE-2021-4104. It is meant to be used as a direct replacement for Log4j v1 libraries. Log4j 1.2 project page: https://logging.apache.org/log4j/1.2/ Apache 2.0 Licence: https://www.apache.org/licenses/LICENSE-2.0 Usage Add this to...

EUVD-2011-4157

Malware in sbrugna...

EUVD-2011-4156

Malware in sbrugna...

EUVD-2010-4800

Malware in sbrugna...

EUVD-2010-4799

Malware in sbrugna...

EUVD-2012-1012

Malware in sbrugna...

CVE-2024-44450

Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 190...

CVE-2024-44450

Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 190...

CVE-2024-44450: Authorization Bypass Through User-Controlled Key

Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 190...

CVE-2024-44450

Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 190...

CVE-2024-44450

The AIMS eCrew mobile application, specifically versions prior to JUN23 #190 , is vulnerable to Authorization Bypass in multiple functions. The root cause is attributed to improper access control , which can be triggered through a user-controlled key . This vulnerability allows for unauthorized a...

AIMS eCrew 安全漏洞

AIMS eCrew is an AIMS native mobile application for Google devices from AIMS. AIMS eCrew has a security vulnerability that originates from improper access control...

CVE-2024-44450

Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 190...

PT-2025-2677 · Unknown · Aims Ecrew

Name of the Vulnerable Software and Affected Versions: AIMS eCrew versions prior to JUN23 190 Description: Multiple functions in AIMS eCrew are vulnerable to Authorization Bypass. The issue was fixed in version JUN23 190. Recommendations: For versions prior to JUN23 190, update to version JUN23 1...

CVE-2024-22936

Cross-site scripting XSS vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2024-22936

Cross-site scripting XSS vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PT-2024-19619 · Genesis · Genesis Aims Student Information Systems +1

Name of the Vulnerable Software and Affected Versions: Genesis AIMS Student Information Systems version 3053 Description: The issue is a cross-site scripting XSS vulnerability in the Parents & Student Portal of Genesis School Management Systems. This allows remote attackers to inject arbitrary we...

CVE-2024-22936: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PT-2023-17946 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the Do AIMS SET CALL WAITING function of imsservice.cpp due to a missing bounds check. This could lead to local escalation of privilege, requiring System...

North Korea's APT37 Targeting Southern Counterpart with New M2RAT Malware

The North Korea-linked threat actor tracked as APT37 has been linked to a piece of new malware dubbed M2RAT in attacks targeting its southern counterpart, suggesting continued evolution of the group's features and tactics. APT37, also tracked under the monikers Reaper, RedEyes, Ricochet Chollima,...