CVE-2024-8151

A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/delete-mark.php. The manipulation of the argument mark leads to cross site scripting. It is possible to initiate the attack...

SourceCodester Interactive Map with Marker 跨站脚本漏洞

SourceCodester Interactive Map with Marker is an interactive map application with markers from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Interactive Map with Marker version 1.0, which stems from a cross-site scripting vulnerability in the mark parameter of the...

PT-2024-38838 · Unknown · Sourcecodester Interactive Map With Marker

Name of the Vulnerable Software and Affected Versions: SourceCodester Interactive Map with Marker version 1.0 Description: A vulnerability was found in SourceCodester Interactive Map with Marker. It has been classified as problematic and affects an unknown part of the file...

PT-2024-30675 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.7 Mattermost versions 9.10.x through 9.10.0 Description: The issue is related to improper access controls, allowing any authenticated user, including guests, to mark any channel inside any team as read fo...

CVE-2024-42680

An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server absolute path by entering a single quotation mark...

Six 0-Days Lead Microsoft’s August 2024 Patch Push

Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This months bundle of update joy from Redmond includes patches for...

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2024-38213

CVE-2024-38213 is a Windows Mark of the Web (MoTW) security feature bypass vulnerability. Affected software involves Windows MoTW handling; the flaw allows downloaded web-origin files to bypass warnings/ protections, enabling potentially malicious content to execute. Exploitation information in c...

CVE-2024-38213 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2024-5548 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The vulnerability is related to a security feature bypass in Microsoft Windows, specifically in the Mark of the Web MoTW mechanism. This allows attackers to bypass SmartScreen...

This Week in Spring - August 13th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's Tuesday and work is well underway to prepare for the huge SpringOne event in Las Vegas in just a few short week's time! I'm elated! So, let's get this roundup on the road so I can get back to the preparation frenzy...

AZL-47774 CVE-2024-43168 affecting package unbound for versions less than 1.19.1-2

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

PT-2024-5867 · Nlnet +4 · Unbound +4

Name of the Vulnerable Software and Affected Versions: Unbound affected versions not specified Description: A heap-buffer-overflow flaw was found in the cfg mark ports function within Unbound's config file.c, which can lead to memory corruption. This issue could allow an attacker with local acces...

CVE-2024-41243

An Incorrect Access Control vulnerability was found in /smsa/viewmarks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details...

SUSE CVE-2024-42135

In the Linux kernel, the following vulnerability has been resolved: vhosttask: Handle SIGKILL by flushing work and exiting Instead of lingering until the device is closed, this has us handle SIGKILL by: 1. marking the worker as killed so we no longer try to use it with new virtqueues and new flus...

DEBIAN-CVE-2024-42135

In the Linux kernel, the following vulnerability has been resolved: vhosttask: Handle SIGKILL by flushing work and exiting Instead of lingering until the device is closed, this has us handle SIGKILL by: 1. marking the worker as killed so we no longer try to use it with new virtqueues and new flus...

AZL-54098 CVE-2024-42135 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: vhosttask: Handle SIGKILL by flushing work and exiting Instead of lingering until the device is closed, this has us handle SIGKILL by: 1. marking the worker as killed so we no longer try to use it with new virtqueues and new flus...

CVE-2024-41819

Note Mark is a web-based Markdown notes app. A stored cross-site scripting XSS vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerability is fixed in 0.13.1...

CVE-2024-41819

CVE-2024-41819 concerns Note Mark, a web-based Markdown notes app. The vulnerability is a stored XSS in the URL value of a link embedded in markdown content, allowing arbitrary web scripts to run when a user interacts with the rendered note. Affected versions are prior to 0.13.1; remediation is t...