CVE-2024-3542

Campcodes Church Management System 1.0 contains a cross-site scripting vulnerability in /admin/add_visitor.php, triggered by the mobile parameter. Description indicates remote initiation and publicly disclosed exploit; CVSS metrics cite MEDIUM impact overall (NVD 6.1). Connected sources corrobora...

PT-2024-26488 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A problematic vulnerability was found in the system, affecting unknown code of the file /admin/add visitor.php. The manipulation of the mobile argument leads to cross-site scripting...

Church Management System 跨站脚本漏洞

Church Management System is a church management system. A cross-site scripting vulnerability exists in version 1.0 of the Church Management System, which stems from a cross-site scripting vulnerability in the mobile parameter of the /admin/addvisitor.php file...

The vulnerability of the Printer Device service in the Avalanche mobile device management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Printer Device service in the Avalanche mobile device management system is related to errors in the configuration of Apache Derby, which is used by the printing device service. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-26220

Windows Mobile Hotspot Information Disclosure Vulnerability...

CVE-2024-26220

Windows Mobile Hotspot Information Disclosure Vulnerability...

CVE-2024-26220 Windows Mobile Hotspot Information Disclosure Vulnerability

...

CVE-2024-26220

CVE-2024-26220 affects Windows Mobile Hotspot and is described as an Information Disclosure vulnerability. The connected NCSC advisory lists CVE-2024-26220 with impact: Access to sensitive data and a CVSS v3.1 base score of 5.0 (Medium). No root-cause, affected build versions, or remediation deta...

CVE-2024-26220 Windows Mobile Hotspot Information Disclosure Vulnerability

...

Windows Mobile Hotspot Information Disclosure Vulnerability

...

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

Microsoft Windows Mobile Hotspot 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Mobile Hotspot. The vulnerability can be exploited by an attacker to gain access to sensitive information. The following products and...

PT-2024-3026 · Microsoft · Windows Mobile Hotspot +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Hotspot affected versions not specified Description: The issue is related to the use of an uninitialized pointer in the Windows Mobile Hotspot service, which can allow an attacker to disclose protected information. There is no...

Top 3 API Leaks Identified by Cybersecurity & InfoSec Experts

APIs Application Programming Interfaces have proliferated widely, which increases their susceptibility to various vulnerabilities. In the realm of web applications, prime examples that stand out are SOAP Simple Object Access Protocol and Representational State Transfer REST APIs. Due to their...

The incognito mode of the Safari browser allows for vulnerabilities in iOS and iPadOS operating systems, enabling attackers to disclose protected information.

The vulnerability of the Incognito mode in the Safari browser on iOS and iPadOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose protected information...

NetworkManager bug fix update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

CVE-2024-31215 Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. A SSRF vulnerability in firebase database check logic. The attacker can cause the server to make a connection to internal-only services within the organization’s...

CVE-2024-31215

MobSF (Mobile Security Framework) is affected by a Server-Side Request Forgery (SSRF) in the firebase database check logic. The vulnerability allows an attacker to cause the MobSF server to connect to internal-only services within the organization’s infrastructure when a malicious app is uploaded...

CVE-2024-31215 Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. A SSRF vulnerability in firebase database check logic. The attacker can cause the server to make a connection to internal-only services within the organization’s...

GHSA-WPFF-WM84-X5CX Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check

Impact What kind of vulnerability is it? Who is impacted? SSRF vulnerability in firebase database check logic. The attacker can cause the server to make a connection to internal-only services within the organization’s infrastructure. When malicious app is uploaded to Static analyzer, it is possib...