Grafana Security Vulnerabilities

Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. Grafana has a security vulnerability that stems from inadequate cleanup of path parameters provided by...

Barangay Population Monitoring System Cross-Site Scripting Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System version 1.0, which stems from a cross-site scripting XSS vulnerability in the Add Residen...

CVE-2024-25207

The CVE-2024-25207 entry concerns Barangay Population Monitoring System v1.0, which has a cross-site scripting (XSS) flaw in the Add Resident function (masterlist.php) allowing payloads in the Contact Number field to execute arbitrary scripts. Affected component: Add Resident feature in Barangay ...

CVE-2024-25209

Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php...

PT-2024-20816 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a cross-site scripting XSS vulnerability in the Add Resident function at "/barangay-population-monitoring-system/masterlist.php". This issue allows attackers t...

CVE-2024-25209

CVE-2024-25209 affects Barangay Population Monitoring System 1.0. The vulnerability is a SQL injection in the resident parameter of /endpoint/delete-resident.php. According to connected sources, the issue has a high impact (CVSS v3.1: 9.8, critical) with network attack vector, no user interaction...

Barangay Population Monitoring System Cross-Site Scripting Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System version 1.0, which stems from a cross-site scripting XSS vulnerability in the Add Residen...

The vulnerability of the Apache Airflow network software, related to the exposure of protected information, allows attackers to view warnings related to all DAGs in Airflow.

The vulnerability of the Apache Airflow network software relates to the exposure of protected information. Exploiting this vulnerability allows a malicious actor to monitor all DAGs in Airflow...

TheTruthSpy stalkerware, still insecure, still leaking data

In 2022, we published an article about how photographs of children taken by a stalkerware-type app were found exposed on the internet because of poor cybersecurity practices by the app vendor. The stalkerware-type app involved, TheTruthSpy, has shown once again that the way in which it handles...

Remote Monitoring & Management software used in phishing attacks

Remote Monitoring & Management RMM software, including popular tools like AnyDesk, Atera, and Splashtop, are invaluable for IT administrators today, streamlining tasks and ensuring network integrity from afar. However, these same tools have caught the eye of cybercriminals, who exploit them to...

CVE-2023-41707

Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated...

CVE-2023-41705

Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a...

Cross site request forgery (csrf)

Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing of user-defined...

Cross site request forgery (csrf)

Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a...

CVE-2023-41707

Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated...

CVE-2023-41707

CVE-2023-41707 affects Open-Xchange App Suite. The issue is the unrestricted processing of user-defined mail search expressions, leading to high processing loads and potential availability degradation. Root cause: lack of limits on mail search processing; impact: availability could be reduced (as...

Moderate: Red Hat Security Advisory: tcpdump security update

An update for tcpdump is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

DLL Redirection Attacks

PanelSwWix4.Sdk is vulneravle to DLL redirection attacks. The vulnerability is due to improper DLL tamper checks within the users temp folder, allowing an attacker to escalate privileges by dropping a malicious DLL into a specific directory monitored by the burn engine, resulting in privilege...

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote. "This malware utilizes the Squirrel installer for distribution, leveraging Node.js and a relatively new multi-platform programming language called Nim as a loader to complete...

The vulnerability of the pollers.php script, a network monitoring software, allows a hacker to execute arbitrary code.

The vulnerability of the pollers.php script, a network monitoring software, is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...