CVE-2024-34480

SourceCodester Computer Laboratory Management System 1.0 has a SQL Injection vulnerability in admin/category/view_category.php?id. The issue is described across multiple sources, with CVSS 3.1/4.6? Actually CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). The vulne...

CVE-2024-34479

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection...

PT-2024-25932

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue allows for SQL Injection in the admin/category/view category.php file through the id parameter. Recommendations For SourceCodester Computer Laboratory...

PT-2024-25930

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue allows for SQL Injection in the classes/Master.php file through the id parameter. Recommendations For SourceCodester Computer Laboratory Management System...

CVE-2024-34480

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/viewcategory.php id SQL Injection...

Malware in @bingads-webui-react/primitive-utilities

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7905 Malicious code in @bingads-webui-react/with-site-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997e1cce193e872c031f1482119f4899f32d99a1ecc7dc194270a504607c421e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7890 Malicious code in permenmd-vps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a8748879a494a5092a0ad46e24169aed2ca197307e50d234d71b25dc7b4e1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7888 Malicious code in permenmd-flood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e8f95c3a74116ec48e873d5cb2b154bc8c4a69db48182c6e0555deab176df12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Computer Laboratory Management System security vulnerabilities

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System version 1.0 that stems from an incorrect access control issue that results in elevated privileges...

Computer Laboratory Management System security vulnerabilities

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System version 1.0, which originates from vulnerability to SQL injection attacks...

CVE-2024-42348 FOG leaks sensitive information (AD domain, username and password)

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395...

FOGProject security vulnerabilities

FOGProject is a free open source network computer cloning and management solution from FOGProject Open Source. It can be used to deploy and manage any desktop operating system. A security vulnerability exists in FOGProject version 1.5.10.41.2, which stems from the potential disclosure of AD...

CVE-2024-42348: Improper Neutralization of Special Elements used in a Command

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395...

Obfuscation: There Are Two Sides To Everything

How to detect and prevent attackers from using these various techniques Obfuscation is an important technique for protecting software that also carries risks, especially when used by malware authors. In this article, we examine obfuscation, its effects, and responses to it. What Is Obfuscation?...

A $500 Open Source Tool Lets Anyone Hack Computer Chips With Lasers

The RayV Lite will make it hundreds of times cheaper for anyone to carry out physics-bending feats of hardware hacking...

MAL-2024-7877 Malicious code in diosaziose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e55eab0b1fe3321b359ded42ffc43ae4db39f3ff2dab487f6843d966631c5f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7878 Malicious code in modernliner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf623671632e06ed7e8e26020d02280a1f33a08072118d85f4308e61cb33cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7880 Malicious code in taiwinders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dab44b2fa45e4dc1c7966fb53989bb8c53c203f15da117a99bcab2ce4d1125c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7875 Malicious code in boostrapsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d56d7ae2cc50c737f4b7272c51fef0ec9899e899d19628763c3aa6aad5dfef1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...