8110 matches found
Malicious code in tracking-protection-experiment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e3c4e6767c5b9de18b97979fd15fbe90fdc3b01d78bb3ce044f224e588787a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11926 Malicious code in tracking-protection-experiment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e3c4e6767c5b9de18b97979fd15fbe90fdc3b01d78bb3ce044f224e588787a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-12787
A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision...
CVE-2024-12787 1000 Projects Attendance Tracking Management System check_student_login.php sql injection
A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...
CVE-2024-12787
CVE-2024-12787 affects 1000 Projects Attendance Tracking Management System v1.0, with a SQL injection in the /student/check_student_login.php endpoint via the student_emailid parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple sources corroborate an atta...
CVE-2024-12787 1000 Projects Attendance Tracking Management System check_student_login.php sql injection
A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...
CVE-2020-15934
creationtimestamp| type| source ---|---|--- 2024-12-19 11:01:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113679146598752848 2024-12-19 11:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnqmtb2gt2s 2024-12-19 13:08:48+00:00| seen|...
Medium: firefox
Issue Overview: Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This...
CVE-2024-12787: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...
CVE-2024-55975
creationtimestamp| type| source ---|---|--- 2024-12-18 12:03:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113673725405915672 2024-12-18 13:41:48+00:00| seen| https://t.me/cvedetector/13193 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...
CVE-2024-11881
creationtimestamp| type| source ---|---|--- 2024-12-18 02:41:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113671516054954544 2024-12-18 05:19:37+00:00| seen| https://t.me/cvedetector/13144...
CVE-2024-51175
creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373957707285 2024-12-18 00:18:42+00:00| seen| https://t.me/cvedetector/13140...
GHSA-FM9W-7M7V-WXQV
creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373972746279 2024-12-18 00:18:39+00:00| seen| https://t.me/cvedetector/13136...
CVE-2024-56142
creationtimestamp| type| source ---|---|--- 2024-12-17 21:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113670348307536287 2024-12-18 00:18:40+00:00| seen| https://t.me/cvedetector/13137...
CVE-2024-55968
creationtimestamp| type| source ---|---|--- 2024-12-17 21:12:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9471 2024-12-17 21:16:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9472 2025-01-09 19:23:03+00:00| seen|...
CVE-2024-37605
creationtimestamp| type| source ---|---|--- 2024-12-17 14:43:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113668693309727055 2024-12-17 16:46:35+00:00| seen| https://t.me/cvedetector/13096...
Download a banker to track your parcel
In late October 2024, a new scheme for distributing a certain Android banking Trojan called "Mamont" was uncovered. The victim would receive an instant message from an unknown sender asking to identify a person in a photo. The attackers would then send what appeared to be the photo itself but was...