SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM has a security vulnerability that stems from inadequate validation of user input...

Deno security breach

Deno is open source for a simple, modern and secure JavaScript and TypeScript runtime environment. It uses V8 and is built with Rust. A security vulnerability exists in Deno version 1.44.0 that stems from improper privilege validation...

Small CRM 1.0 Cross Site Scripting

Exploit Title: Small CRM Developed using PHP and MySQL - Cross-Site Scripting Reflected Date: 05.06.2024 Exploit Author: Furkan Eren Tetik Vendor Homepage: https://phpgurukul.com/php-projects-free-downloads Software Link: https://phpgurukul.com/small-crm-php Version: 1.0 Tested on: Windows 11, Ka...

robdns security breach

robdns is a dns service. A security vulnerability exists in robdns, which was discovered to contain a null pointer dereference vulnerability via the item-tokens component at /src/conf-parse.c. The vulnerability was discovered in the item-tokens component at /src/conf-parse.c...

MAL-2024-1452 Malicious code in @juiggitea/molestias-quo-nihil-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9460ce6b7a5e9c2646ba5c2a4dff77162e5267b476b027f8fcd99d70eb18c156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1415 Malicious code in @juiggitea/consequuntur-iure-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acd1d992b7310fef07ffe41951da097b2c107cab4ef49b0f1efa57cdc5a1a77f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that originates in a shared hosting environment that is misconfigured to allow access to oth...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from a stored cross-site scripting XSS vulnerability due to a lack of additional...

Astrotalks Security Breach

Astrotalks is a free online astrology prediction website from Astrotalks India. A security vulnerability exists in Astrotalks version 10/03/2023, which stems from improper privilege management...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from a stored cross-site scripting XSS vulnerability when editing another user's...

LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader

By Anna Bennett, Nicole Hoffman, Asheer Malhotra, Sean Taylor and Brandon White. Cisco Talos is disclosing a new suspected data theft campaign, active since at least 2021, we attribute to an advanced persistent threat actor APT were calling "LilacSquid." LilacSquids victimology includes a diverse...

JAVS Courtroom Recording Software Hit by Supply Chain Attack

...

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

Dassault Systèmes DELMIA Apriso 安全漏洞

Dassault Systèmes DELMIA Apriso is an interactive manufacturing application for digital enterprises from Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes DELMIA Apriso Release 2019 to 2024, which stems from a deserialization vulnerability in .NET objects. An attacker...

Dassault Systèmes DELMIA Apriso 安全漏洞

Dassault Systèmes DELMIA Apriso is an interactive manufacturing application for digital enterprises from Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes DELMIA Apriso Release 2019 to 2024, which stems from a deserialization vulnerability in .NET objects. An attacker...

Dino Physics School Assistant 安全漏洞

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a cross-site scripting XSS vulnerability in the parameter middlename of the file classes/Users.php...

多款Anpviz产品 安全漏洞

Anpviz IPC is a series of network cameras from Anpviz. A security vulnerability exists in multiple Anpviz products that stems from storing hard-coded encryption keys in the device firmware, resulting in a security hole. Affected products and versions: Anpviz IPC-D250, IPC-D260, IPC-B850 IPC-D850,...

多款Anpviz产品 安全漏洞

Anpviz IPC is a series of network cameras from Anpviz. A security vulnerability exists in multiple Anpviz products that originates from a vulnerability that allows an unauthenticated attacker to download the device's running configuration to the /ConfigFile.ini or /config.xml URIs via an HTTP GET...

UTAU 安全漏洞

UTAU is a Japanese UTAU open source song synthesizer created for Windows. A security vulnerability exists in UTAU versions prior to v0.4.19 that stems from the presence of a path traversal vulnerability...

UTAU 安全漏洞

UTAU is a Japanese UTAU open source song synthesizer created for Windows. A security vulnerability exists in UTAU versions prior to v0.4.19 that stems from the presence of an operating system command injection vulnerability...