PT-2024-27788 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the id parameter to the "php-lfis/admin/categories/manage category.php" endpoint. Recommendations: For...

PT-2024-27787 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the id parameter to the "php-lfis/admin/categories/view category.php" endpoint. Recommendations: For Lo...

CVE-2024-37859: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

CVE-2024-37858: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

CVE-2024-37857: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...

CVE-2024-37856: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page...

SUSE CVE-2022-48787

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all or, presumably, all of the firmware files failed to parse, we end up unbinding by calling devicereleasedriver, which calls remove, which then in iwlwifi calls...

Error: "StoreFront Monitor Probe Failed" on NetScaler

StoreFront monitor does not work on NetScaler and displays error "StoreFront Monitor Probe Failed". When http monitor is bound to StoreFront service, 200 OK is received in response and service shows as UP. When https monitor is bound to StoreFront service, it fails with error 404 Not Found...

Error “The system cannot find the specified file. Error number 0xE0000002” Occurs When Merging vDisk Versions Fails

Merging vDisk versions fails and displays the following error: "The system cannot find the specified file. Error number 0xE0000002." Running mcli run mergedisk –p disklocatorid base=1 displays success on execution, however merged disk doesnot come up on console or store. Management Daemon logs...

Malicious code in xolosamsdyhcfa (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wmi-toolbox (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rozenitro (PyPI)

--- -= Per source details. Do not edit below this line.=-...

UBUNTU-CVE-2024-6162

A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener. This issue arises because the same buffer is used to decode the paths for multiple requests simultaneously, leading to incorrect path information being processe...

There was a problem validating the profile: Repository not found.

Challenge Repository not found error while adding Veeam Repository in Veeam Kasten for Kubernetes despite verifying the repository in the Veeam Backup & Replication Console. Cause The 'Repository Not found' issue can happen in multiple scenarios. Most of the cases are due to repository Permission...

Lost And Found Information System 1.0 Cross Site Scripting

Exploit Title: Refelcted Cross Site Scripting Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html...

Lost And Found Information System 1.0 Cross Site Scripting

Exploit Title: Stored Cross Site Scripting Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html...

CVE-2024-4812

The CVE-2024-4812 entries describe a stored cross-site scripting (XSS) vulnerability in the Katello plugin for Foreman, where malicious JavaScript can be saved in a user Description field and executed when loading pages such as Host Collections. Root cause: insufficient input sanitization of the ...

Unable to create New Machine Catalogs or New virtual machines in existing Machine Catalogs

Issue : Unable to create New Machine Catalogs or New virtual machines in existing Machine Catalogs. Error : Failed to create virtual machine 'VM', account name was not found. Description: Unable to add new machines in existing machine catalogs. Unable to create new machine catalogs. Unable to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from resolving channel bits even after all channels have been found...

PVS export wizard reports "No Devices Found to Export"

Unable to add PVS provisioned machines to Studio Machine Catalogs. When using the Export Devices Wizard, users receive the error "No Devices Found to Export". Issue remains even after deleting and recreating the AD computer objects...