4416 matches found
PT-2024-38585 · Sourcecodester · Sourcecodester Task Progress Tracker
Name of the Vulnerable Software and Affected Versions: SourceCodester Task Progress Tracker version 1.0 Description: A vulnerability was found in the software, affecting an unknown functionality of the file /endpoint/add-task.php. The manipulation of the task name argument leads to cross-site...
SourceCodester Task Progress Tracker 跨站脚本漏洞
SourceCodester Task Progress Tracker is a task progress tracker from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Task Progress Tracker version 1.0, which stems from an incorrect operation of the parameter taskname that can lead to a cross-site scripting attack...
Debian dsa-5743 : roundcube - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5743 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5743-1 [email protected] https://www.debian.org/securit...
Debian dsa-5744 : thunderbird - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5744 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5744-1 [email protected]...
Malicious code in dx-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71179e532e0a9ad66fcf86c05453073081f7e77c7ffc4846697e843fe2ba1ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7967 Malicious code in kaleido-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d5af1457894ebaf8d8c44e57ae9046b4dc0e1183783bb191bb3123a0ed2fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7950 Malicious code in dx-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71179e532e0a9ad66fcf86c05453073081f7e77c7ffc4846697e843fe2ba1ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kaleido-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d5af1457894ebaf8d8c44e57ae9046b4dc0e1183783bb191bb3123a0ed2fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Scammers are impersonating cryptocurrency exchanges, FBI warns
The Federal Bureau of Investigation FBI issued a public service announcement warning the public about scammers impersonating cryptocurrency exchange employees to steal funds. There are many types of crypto related scams, but in this case, the FBI provided an advisory about scammers that contact t...
CVE-2024-7226
A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...
CVE-2024-7226
A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...
CVE-2024-7226 SourceCodester Medicine Tracker System Password Change cross-site request forgery
A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...
CVE-2024-7226 SourceCodester Medicine Tracker System Password Change cross-site request forgery
A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...
CVE-2024-7226
CVE-2024-7226 refers to a cross-site request forgery in SourceCodester Medicine Tracker System 1.0, affecting the code path /classes/Users.php?f=save_user within the Password Change Handler. The vulnerability is triggered remotely and can be exploited after a user visit, with the exploit reported...
PT-2024-38186 · Sourcecodester · Sourcecodester Medicine Tracker System
Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A vulnerability was found in the Password Change Handler component of the SourceCodester Medicine Tracker System, affecting the file /classes/Users.php?f=save user. The...
Medicine Tracker System 跨站请求伪造漏洞
Medicine Tracker System is a drug tracking system by the individual developer Carlo Montero. A cross-site request forgery vulnerability exists in Medicine Tracker System version 1.0, which stems from unknown code in file /classes/Users.php?f=saveuser that can lead to cross-site request forgery...
Debian dsa-5734 : bind9 - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5734 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5734-1 [email protected]...
Canarytokens 安全漏洞
Canarytokens is an open source web activity tracking system from Thinkst Applied Research. A security vulnerability exists in Canarytokens that stems from a cross-site scripting vulnerability discovered in the Cloned Website feature...
Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint
Summary This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory OOM kill. The issue...
