New Android Malware Targeting Brazil's Itaú Unibanco Bank Customers

Researchers have discovered a new Android banking malware that targets Brazil's Itaú Unibanco with the help of lookalike Google Play Store pages to carry out fraudulent financial transactions on victim devices without their knowledge. "This application has a similar icon and name that could trick...

Projectworlds Online Book Store Project In Php CSRF Vulnerability

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

WordPress WP Store theme <= 1.1.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Lenon Leite Patchstack Red Team project in WordPress WP Store theme versions = 1.1.9. This theme uses a vulnerable piece of code related to previously identified vulnerability - CVE-2021-39317. Solution Deactivate and delete. The vendor ignores th...

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

CVE-2021-43155

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

Cross site request forgery (csrf)

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

Sql injection

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...

CVE-2021-43155

CVE-2021-43155 affects Projectsworlds Online Book Store PHP v1.0. A SQL injection exists in cart.php via the bookisbn parameter, allowing unauthorized access to the database and potential data exposure or manipulation as described in CNVD/CNNVD records. The vulnerability details are provided acro...

CVE-2021-43155

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...

CVE-2021-43156

The CVE-2021-43156 entry affects ProjectWorlds Online Book Store PHP 1.0, where a CSRF flaw in admin_delete.php allows a remote attacker to delete any book. The connected documents consistently describe this CSRF vulnerability in the admin_delete.php endpoint as the root cause, with impact limite...

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

Projectworlds Online Book Store Project In Php SQL注入漏洞

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectsworlds.A SQL injection vulnerability exists in Projectsworlds Online Book Store PHP, which stems from the fact that Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the...

Use Email based discovery for Workspace with Citrix Cloud

Before 2023 ======== Email based discovery can be used to add a Store to the Workspace, using the email address instead of the Store URL. We could do this for on-prem Stores, even with Gateway. The steps are provided here...

Projectworlds Online Book Store Project In Php 跨站请求伪造漏洞

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

Malicious Joker App Scores Half-Million Downloads on Google Play

The Joker malware is back again on Google Play, this time spotted in a mobile application called Color Message. The app was downloaded more than 500,000 times before its removal from the store. Users should immediately delete Color Message from their devices to avoid being defrauded, researchers ...

CLSA-2021-1639681613 Fix CVE(s): CVE-2021-2388

Fix CVE-2021-2388 OpenJDK: Incorrect comparison during range check elimination Add JDK-8165323.diff: fs Files.getFileStore fails with "Mount point not found" in chroot environment...

Improper Preservation of Permissions in etcd

...

GGLocker iOS 安全漏洞

GgLocker Ios is a simple digital locker by Gabriele Greco personal developer. A security vulnerability exists in the GGLocker iOS app that stems from an insecure data store containing password hashes, leading to authentication bypass...