CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-37401

creationtimestamp| type| source ---|---|--- 2024-12-11 18:57:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113635719760148469 2024-12-11 19:02:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113635736547254863 2024-12-24 12:43:37+00:00| seen|...

GHSA-X794-564W-VGXX

creationtimestamp| type| source ---|---|--- 2024-12-11 17:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113635295248950416...

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

CVE-2024-12294

creationtimestamp| type| source ---|---|--- 2024-12-11 11:02:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113633848469166263 2024-12-11 12:43:59+00:00| seen| https://t.me/cvedetector/12629 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18...

Security Vulnerabilities fixed in Thunderbird 115.18 — Mozilla

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. Enhanced Tracking Protection's Strict...

PT-2025-13868

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sonoma versions prior to 14.7.5 Description The issue was addressed with improved handling of protocols. An attacker in a privileged network position can track a user's activity. Recommendations For...

CVE-2024-55655

creationtimestamp| type| source ---|---|--- 2024-12-10 23:12:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113631058808905104 2024-12-11 01:01:35+00:00| seen| https://t.me/cvedetector/12613 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18...

CVE-2024-49142

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 22:07:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113630803588655999 2025-01-14 21:50:00+00:00| seen|...

CVE-2024-47484

creationtimestamp| type| source ---|---|--- 2024-12-10 10:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113628075982373757 2024-12-10 13:17:27+00:00| seen| https://t.me/cvedetector/12493 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1693/...

CVE-2023-50904

creationtimestamp| type| source ---|---|--- 2024-12-09 14:46:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113623406340867935...

CVE-2023-50887

creationtimestamp| type| source ---|---|--- 2024-12-09 14:31:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113623347312984117...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-12270

creationtimestamp| type| source ---|---|--- 2024-12-07 09:44:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113610893279323997 2024-12-07 11:41:57+00:00| seen| https://t.me/cvedetector/12316 2025-01-06 20:20:04+00:00| seen|...

CVE-2024-11329

creationtimestamp| type| source ---|---|--- 2024-12-07 01:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113609066916483610 2024-12-07 04:10:52+00:00| seen| https://t.me/cvedetector/12309...

CVE-2024-54747

creationtimestamp| type| source ---|---|--- 2024-12-06 15:37:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113606618227054679 2024-12-06 18:07:56+00:00| seen| https://t.me/cvedetector/12236...

CVE-2024-54207

creationtimestamp| type| source ---|---|--- 2024-12-06 15:05:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113606494323979888 2024-12-06 16:27:26+00:00| seen| https://t.me/cvedetector/12218...

CVE-2024-51815

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066022271275 2024-12-06 13:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080923087323...

CVE-2024-52335

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066036348865 2024-12-06 13:20:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080937405119 2024-12-06 20:06:36+00:00| published-proof-of-concept|...