CVE-2024-3436: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Admin/edit-photo.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload. The attack c...

PT-2024-25817 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue was discovered in the Avatar Handler component, specifically affecting the /Admin/edit-photo.php file. The avatar argument is vulnerable to manipulation, leadin...

PT-2024-25828 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue affects the Avatar Handler component, specifically the file /Admin/add-admin.php. The manipulation of the avatar argument leads to unrestricted upload. This iss...

lifeskillsprisonministry.com Cross Site Scripting vulnerability OBB-3898114

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

US Man Jailed 8 Years for SIM Swapping and Apple Support Impersonation

By Waqas In addition to his prison sentence, Amir Hossein Golshan, the culprit, has been ordered to pay $1,218,526 in restitution to his victims. This is a post from HackRead.com Read the original post: US Man Jailed 8 Years for SIM Swapping and Apple Support Impersonation...

Talitrix Prison-Monitoring System Tracks Inmates Down to Their Heart Rate

Documents WIRED obtained detail new prison-monitoring technology that keeps tabs on inmates' location, heartbeats, and more...

Mastermind Behind Twitter 2020 Hack Pleads Guilty and Faces up to 70 Years in Prison

A U.K. national has pleaded guilty in the U.S. in connection with the July 2020 Twitter attack affecting numerous high-profile accounts and defrauding other users of the platform. Joseph James O'Connor, who also went by the online alias PlugwalkJoe , admitted to "his role in cyberstalking and...

They Posted Porn on Twitter. German Authorities Called the Cops

Regulators are using an AI system to scan websites and messaging apps to find pornography. Creators face fines and potential prison sentences...

A Link to News Site Meduza Can (Technically) Land You in Russian Prison

Plus: Hive ransomware gang gets knocked offline, FBI confirms North Korea stole $100 million, and more...

Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

The former Senior Director of Safety & Security at eBay, and the companys former Director of Global Resiliency, have been sentenced to prison for their roles in a cyberstalking campaign. The targets of the campaign were the editor and publisher of a newsletter that eBay executives viewed as...

Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison

A former affiliate of the Netwalker ransomware has been sentenced to 20 years in prison in the U.S., a little over three months after the Canadian national pleaded guilty to his role in the crimes. Sebastien Vachon-Desjardins, 35, has also been ordered to forfeit $21,500,000 that was illicitly...

Nigerian Prison Break

There was a massive prison break in Abuja, Nigeria: Armed with bombs, Rocket Propelled Grenade RPGs and General Purpose Machine Guns GPMG, the attackers, who arrived at about 10:05 p.m. local time, gained access through the back of the prison, using dynamites to destroy the heavily fortified...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48400)

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/crimes/viewcrime.php in the id parameter in /pms/admin/crimes/viewcrime.php is missing the S...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48399)

Prison Management System is a prison management system from Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the id in /pms/admin/cells/viewcell.php in the application. parameter in /pms/admin/cells/viewcell.php lacks a...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48394)

Prison Management System is a prison management system by Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/manage The vulnerability is caused by the lack of SQL data filtering escape in the i...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48389)

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/actions/manageaction. php in the id parameter lack of SQL data filter escaping, an attack...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48395)

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/managerecord. php in the id parameter lack of SQL data filter escaping, an attack...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48392)

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/manageinmate. php in the id parameter lack of SQL data filter escaping, an attack...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48391)

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/crimes/managecrime.php The vulnerability is caused by the lack of SQL data filtering...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48390)

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/cells/managecell.php in the id parameter in /pms/admin/cells/managecell.php is missing the S...