1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from the parameter coursecode in the file...

CVE-2024-56311

creationtimestamp| type| source ---|---|--- 2024-12-22 21:09:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113698522251929073 2024-12-22 21:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwdknocxx2e 2024-12-22 23:06:22+00:00| seen|...

Mystery Drone Sightings Lead to FAA Ban Despite No Detected Threats

Plus: Google’s U-turn on creepy “fingerprint” tracking, the LockBit ransomware gang’s teased comeback, and a potential US ban on the most popular routers in America...

CVE-2024-56359

creationtimestamp| type| source ---|---|--- 2024-12-20 20:29:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113687040973152332 2024-12-20 21:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcn7doro2l 2024-12-20 23:26:35+00:00| seen|...

CVE-2024-11331

creationtimestamp| type| source ---|---|--- 2024-12-20 07:05:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683880024480688 2024-12-20 07:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptomtz2z2a 2024-12-20 09:13:24+00:00| seen|...

CVE-2024-8968

creationtimestamp| type| source ---|---|--- 2024-12-20 06:01:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683628372130551 2024-12-20 06:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpqdzi7dc2s 2024-12-20 08:22:59+00:00| seen|...

CVE-2024-44292

creationtimestamp| type| source ---|---|--- 2024-12-20 04:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmvsqqd2g 2024-12-20 04:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683251724054879 2024-12-20 05:52:29+00:00| seen|...

CVE-2024-44211

creationtimestamp| type| source ---|---|--- 2024-12-20 04:10:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683192693122047 2024-12-20 04:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmox7hi22 2024-12-20 05:52:23+00:00| seen|...

GHSA-V8RF-PVGM-XXF2

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106505075065 2024-12-19 19:23:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119402600838...

GHSA-3PFM-HP96-PFGV

creationtimestamp| type| source ---|---|--- 2024-12-19 18:44:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113680964695610869...

CVE-2024-56200

creationtimestamp| type| source ---|---|--- 2024-12-19 18:44:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113680964695610869 2024-12-19 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldolhrnaxv2a 2024-12-19 20:40:32+00:00| seen|...

Malicious code in tracking-protection-experiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e3c4e6767c5b9de18b97979fd15fbe90fdc3b01d78bb3ce044f224e588787a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11926 Malicious code in tracking-protection-experiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e3c4e6767c5b9de18b97979fd15fbe90fdc3b01d78bb3ce044f224e588787a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12787

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision...

CVE-2024-12787 1000 Projects Attendance Tracking Management System check_student_login.php sql injection

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12787 1000 Projects Attendance Tracking Management System check_student_login.php sql injection

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12787

CVE-2024-12787 affects 1000 Projects Attendance Tracking Management System v1.0, with a SQL injection in the /student/check_student_login.php endpoint via the student_emailid parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple sources corroborate an atta...

CVE-2020-15934

creationtimestamp| type| source ---|---|--- 2024-12-19 11:01:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113679146598752848 2024-12-19 11:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnqmtb2gt2s 2024-12-19 13:08:48+00:00| seen|...

Medium: firefox

Issue Overview: Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This...