176 matches found
CVE-2024-12976
A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...
Codezips Hospital Management System 安全漏洞
Codezips Hospital Management System is an open source hospital management system from Codezips. A security vulnerability exists in Codezips Hospital Management System version 1.0, which stems from an incorrect operation of the parameter tel that can lead to an SQL injection...
PT-2024-17838 · Codezips · Codezips Hospital Management System
Name of the Vulnerable Software and Affected Versions: CodeZips Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /staff.php. The manipulation of the tel argument leads to SQL injection. The attack c...
Sweet Security Announces Availability of its Cloud Native Detection & Response Platform on the AWS Marketplace
TEL AVIV, Israel, 11th November 2024, CyberNewsWire...
Malicious code in down_load_ebook_das_meeresblau_von_tel_aviv_by_sarit_yishai_levi_73ol6 (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-32178
VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target...
Last-Level Cache Side-Channel Attacks
AMD ID: AMD-SB-7019 Potential Impact: N/A Severity: N/A Summary Researchers from the University of Illinois Urbana-Champaign and Tel Aviv University have published a paper titled “Last-Level Cache Side-Channel Attacks Are Feasible in the Modern Public Cloud.” The paper does not demonstrate any...
Cypago Announces New Automation Support for AI Security and Governance
By Cyber Newswire Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence AI governance, risk management… This is a post from HackRead.com Read the original post: Cypago Announces New Automation Support for AI Security and Governance...
i7.tel Cross Site Scripting vulnerability OBB-3871806
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tel-lingua.com Cross Site Scripting vulnerability OBB-3839358
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tel-no.com Improper Access Control vulnerability OBB-3705331
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Siemens ALM 0-Day Vulnerabilities Posed Full Remote Takeover Risk
By Waqas Tel Aviv-based firm OTORIO's cybersecurity research team identified and reported these vulnerabilities. This is a post from HackRead.com Read the original post: Siemens ALM 0-Day Vulnerabilities Posed Full Remote Takeover Risk...
PT-2023-28358 · Unknown · Com.Cutestudio.Colordialer
Name of the Vulnerable Software and Affected Versions: com.cutestudio.colordialer versions 2.1.8-2 and earlier Description: The issue allows a remote attacker to initiate phone calls without user consent due to improper export of the com.cutestudio.dialer.activities.DialerActivity component. A...
Holiday Season Cyber Alert: Reflectiz Declares War on Magecart
By Owais Sultan Tel Aviv, Israel, Sep 05, 2023 — Reflectiz, a cybersecurity company specializing in continuous web threat management offers… This is a post from HackRead.com Read the original post: Holiday Season Cyber Alert: Reflectiz Declares War on Magecart...
CVE-2023-0956
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
Xxe
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956
CVE-2023-0956 affects TEL-STER TelWin SCADA WebInterface, with a path traversal vulnerability (CWE-35) caused by external input not neutralizing path separators. This allows an unauthenticated, remote attacker to read files on affected systems. Affected versions span TelWin SCADA WebInterface 3.2...
CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...