Lucene search
+L

18906 matches found

osv_mal
osv_mal
•added 2024/04/02 12:30 a.m.•16 views

MAL-2024-1189 Malicious code in u-workflow.module.common.visibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6dcf3beecd86989a7b3a417a5bf6ae97e3b29c18583b6022dcf50a8a1ec988a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/02 12:10 a.m.•32 views

MAL-2024-1165 Malicious code in pt-api-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78627b7277f79f6b0febc6c2efde348085a7bf7363ebc2986ac5d3e2ce2329d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2024/04/02 12:07 a.m.•50 views

MAL-2024-1164 Malicious code in paysafe-gpf-as-http-proxy-middleware-body-replace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69515fe4abb4869b5999b249c8de31a55fd23bda38e3bd9de3c58c5c245bc5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/04/02 12:07 a.m.•8 views

Malware in paysafe-gpf-as-communication-lib-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/04/02 12:07 a.m.•41 views

MAL-2024-1163 Malicious code in paysafe-gpf-as-communication-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997f87146bcd457b4e2cb94ddbcfbb3730c96dd9a2b5843fcabcbb9456cf899d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/04/02 12:07 a.m.•9 views

Malware in paysafe-gpf-as-http-proxy-middleware-body-replace

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/01 11:00 p.m.•23 views

CVE-2024-3140 SourceCodester Computer Laboratory Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file /classes/Users.php?f=save. The manipulation of the argument middlename leads to cross site scripting. It is possible to initiate th...

4CVSS3.6AI score0.00554EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2024/04/01 10:31 p.m.•35 views

CVE-2024-3139 SourceCodester Computer Laboratory Management System save_users improper authorization

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack ma...

5.5CVSS5.5AI score0.00487EPSS
SaveExploits2References4
CVE
CVE
•added 2024/04/01 4:31 p.m.•84 views

CVE-2024-3131

CVE-2024-3131 affects SourceCodester Computer Laboratory Management System v1.0. The vulnerability resides in /classes/Master.php?f=save_category where manipulating the id parameter leads to SQL injection, enabling remote exploitation. Public exploitation and disclosure have been reported. The CV...

6.5CVSS6.4AI score0.00525EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/04/01 4:31 p.m.•47 views

CVE-2024-3131 SourceCodester Computer Laboratory Management System sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument id leads to sql injection. The attack can be initiated...

6.5CVSS7.1AI score0.00525EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/04/01 12:00 a.m.•20 views

PT-2024-24046 · Sourcecodester · Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A problematic issue was found in the system, affecting an unknown part of the file /classes/Users.php?f=save. The manipulation of the middlename argument leads to...

5.4CVSS4.6AI score0.00554EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
•added 2024/04/01 12:00 a.m.•9 views

PT-2024-24037

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description A critical issue has been found in the function save users of the file /classes/Users.php?f=save, where the manipulation of the argument id leads to improper...

5.5CVSS5.5AI score0.00487EPSS
SaveExploits2References8
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•20 views

SourceCodester Computer Laboratory Management System Authorization Vulnerability

Computer Laboratory Management System is a computer laboratory management system. An authorization issue vulnerability exists in SourceCodester Computer Laboratory Management System version 1.0, which stems from a security issue in the saveusers function in /classes/Users.php, which results in...

5.5CVSS5.8AI score0.00487EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•20 views

SourceCodester Computer Laboratory Management System SQL Injection Vulnerability

Computer Laboratory Management System is a computer laboratory management system. A SQL injection vulnerability exists in SourceCodester Computer Laboratory Management System version 1.0, which originates from unknown code in /classes/Master.php?f=savecategory, which leads to SQL injection via th...

6.5CVSS6.6AI score0.00525EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/01 12:00 a.m.•12 views

CVE-2024-3131: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument id leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.00525EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/01 12:00 a.m.•7 views

CVE-2024-3139: Improper Authorization

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack ma...

5.5CVSS5.6AI score0.00487EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/01 12:00 a.m.•6 views

CVE-2024-3140: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file /classes/Users.php?f=save. The manipulation of the argument middlename leads to cross site scripting. It is possible to initiate th...

5.4CVSS3.6AI score0.00554EPSS
SaveExploits2References2
osv_mal
osv_mal
•added 2024/03/31 5:44 p.m.•26 views

MAL-2024-1161 Malicious code in galileo-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ea1d3425cddab091828432f9dffef7f8bc36f5fbf9bcd0e01dffe737417e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2024/03/29 1:38 p.m.•34 views

How to back up your iPhone to a Windows computer

They say the only backup you ever regret is the one you didnt make. iPhone backups can be used to easily move your apps and data to a new phone, to recover things youve lost, or to fix things that have failed. Weve published posts on how to back up your iPhone to iCloud, and how to backup an iPho...

7.1AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/03/29 1:32 a.m.•29 views

MAL-2024-1158 Malicious code in u-workflow.module.common.hour-of-week (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa993331c82ce09532f10dfb1eb3586e1a3343188c93733712aad7f47cb49539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder