CVE-2024-38348: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

CVE-2024-37802: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

CVE-2024-37803: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

PT-2024-27761

Name of the Vulnerable Software and Affected Versions CodeProjects Health Care hospital Management System version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page. This ...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

PT-2024-32169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a problem in the Linux kernel where a BUG ON condition is triggered when a 0 reference count is encountered at btrfs lookup extent info. Instead of causing a BUG ON, t...

CVE-2024-37802

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

PT-2024-27760 · Unknown · Codeprojects Health Care Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Patient Info module. This vulnerability is exploited via the searvalu parameter. Recommendations: For...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 contains a SQL injection vulnerability in the Staff Info module reachable via the searvalu parameter. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security, etc.) with the vulnerability impacting the Staff Info ...

PT-2024-27951 · Unknown · Codeprojects Health Care Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Staff Info module. This vulnerability can be exploited via the searvalu parameter. Recommendations: For...

CVE-2024-37802

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. A SQL injection vulnerability exists in Health Care hospital Management System v1.0, which originates from a SQL injection vulnerability in the searvalu parameter in the Staff Info...

PT-2024-27770 · Vermeg · Vermeg Agilereporter

Name of the Vulnerable Software and Affected Versions: Vermeg Agile Reporter version 23.2.1 Description: The issue is a stored cross-site scripting XSS that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast...

Info Stealing Campaign Uses DLL Sideloading Through Legitimate Cisco Webex’s Binaries for Initial Execution and Defense Evasion

Info Stealing Campaign Uses DLL Sideloading Through Legitimate Cisco Webex’s Binaries for Initial Execution and Defense Evasion By Ale Houspanossian · June 17, 2024 Case Summary It was a quiet Monday morning in March 2024 when the EDR researchers with our Trellix Advanced Research Center identifi...

Basecamp: Path traversal in deeplink query parameter can expose any user's private info to a public directory (one click)

The Basecamp mobile application was found to be vulnerable to a path traversal issue. By crafting a malicious deeplink with a specific "filename" parameter, an attacker could force the application to save user data to any directory on the device, including locations accessible to other applicatio...

OPENSUSE-SU-2024:11443-1 texlive-gitfile-info-2021.186.0.0.5svn51928-46.3 on GA media

These are all security issues fixed in the texlive-gitfile-info-2021.186.0.0.5svn51928-46.3 package on the GA media of openSUSE Tumbleweed...

libdwarf:fuzz_die_cu_attrs_loclist: Heap-use-after-free in dwarf_load_loclists

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6271271030030336 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzdiecuattrsloclist Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

shared-mime-info bug fix and enhancement update

An update is available for shared-mime-info. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...