Tenda G3 Buffer Overflow Vulnerability

The Tenda G3 is a multi-WAN router designed for small and medium-sized businesses, restaurants and hotel chains. A buffer overflow vulnerability exists in the Tenda G3. The vulnerability originates from the parameter pppoeServerWhiteMacIndex of the function formModifyPppAuthWhiteMac in the file...

CLSA-2024-1714073581 Fix of 16 CVEs

Jammy update: v5.15.81 upstream stable release LP: 2003130 // CVE-url: https://ubuntu.com/security/CVE-2023-1382 - tipc: set con sock in tipcconnalloc - tipc: add an extra connget in tipcconnalloc CVE-url: https://ubuntu.com/security/CVE-2023-1998 - x86/speculation: Allow enabling STIBP with lega...

Empowering Small Businesses in the Digital Age: A Must-Read Guide to Web Application & API Security

Small and medium-sized businesses have increasingly become reliant on web applications - whether they are developed or procured, to drive their operations, engage customers, and scale their businesses. The increasing reliance on online operations is underscored by 84% of businesses using digital...

Small CRM SQL Injection Vulnerability (CNVD-2025-23151)

Small CRM is a customer relationship management system. A SQL injection vulnerability exists in Small CRM, which stems from a lack of validation of externally-entered SQL statements in the change password handler. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

CVE-2024-3691

A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functionality of the component Registration Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2024-3691 PHPGurukul Small CRM Registration Page sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functionality of the component Registration Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2024-3691

CVE-2024-3691 affects PHPGurukul Small CRM 3.0, specifically the Registration Page. The vulnerability is a SQL injection caused by lack of input validation on the Registration Page, with a network-based, remotely exploitable attack. Public exploit information exists. Potential impact concerns con...

CVE-2024-3691 PHPGurukul Small CRM Registration Page sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functionality of the component Registration Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2024-3690

A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-3690 PHPGurukul Small CRM Change Password sql injection

A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-3690

CVE-2024-3690 affects PHPGurukul Small CRM 3.0, specifically the Change Password Handler. A SQL injection vulnerability arises from unsafely handled SQL in that component, allowing remote exploitation with public disclosure. Multiple connected sources corroborate the issue; no official patch/vers...

CVE-2024-3690 PHPGurukul Small CRM Change Password sql injection

A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2024-27200 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: A critical issue has been found in the Registration Page component of PHPGurukul Small CRM, affecting some unknown functionality. This issue leads to SQL injection. The attack can be launched...

PT-2024-27195 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: A critical issue was found in the Change Password Handler component, which can be exploited to lead to sql injection. This issue can be launched remotely. Recommendations: For PHPGurukul Small CRM...

PHPGurukul Small CRM SQL注入漏洞

Small CRM is a customer relationship management system. A SQL injection vulnerability exists in Small CRM, which stems from a lack of validation of externally-entered SQL statements in the change password handler. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

SUSE CVE-2024-26697

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The helper function nilfsrecoverycopyblock of nilfsrecoverydsyncblocks, which recovers data from logs created by data sync writes during a mount after an...

A week in security (April 1 – April 7)

A list of topics we covered in the week of April 1 to April 7 of 2024 Last week on Malwarebytes Labs: 60% of small businesses are concerned about cybersecurity threats Cookie consent choices are just being ignored by some websites Bing ad for NordVPN leads to SecTopRAT Jackson County hit by...

60% of small businesses are concerned about cybersecurity threats

According to a recent poll by the US Chamber of Commerce, 60% of small businesses are concerned about cybersecurity threats, and 58% are concerned about a supply chain breakdown. Not surprisingly, small businesses in the professional services sector feel significantly more concerned about...

CVE-2024-20362

CVE-2024-20362 affects Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers. The web-based management interface has insufficient input validation, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by enticing a user to visit maliciou...

CVE-2024-20362

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficie...