TreasureHunt 注入漏洞

TreasureHunt is an automated problem generation tool and challenge-based competition for teaching computer security open-sourced by TreasureHuntGame. An injection vulnerability exists in TreasureHunt version 963e0e0 and prior versions, which stems from the fact that incorrect manipulation of the...

CVE-2024-12894: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of the argument usuario leads to sql injection. It is possible to launch the attack remotely. This...

CVE-2024-12895: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function consolelog of the file TreasureHunt/checkflag.php. The manipulation of the argument problema leads to sql injection. The attack can be launched...

TreasureHunt 注入漏洞

TreasureHunt is a TreasureHuntGame open source automated problem generation tool and challenge-based competition for teaching computer security. An injection vulnerability exists in TreasureHunt version 963e0e0 and prior versions, which stems from the fact that incorrect manipulation of the...

New Point-of-Sale Malware LockPoS Hitches Ride with FlokiBot

Botnets distributing FlokiBot point-of-sale malware have awoken from months of slumber and are back in business spewing a new malware dubbed LockPoS. Researchers say the malware is still flying under the radar of many antivirus and intrusion detection systems because it’s so new. Currently, LockP...

POS Malware Tool "Treasurehunt' Targets Small US-Based Banks, Retailers

As more US companies snuff out point of sale malware by deploying chip-and-PIN bankcard technology, attackers are rushing to exploit existing magnetic strip card systems still vulnerable to malware. A group of hackers that go by the name Bears Inc. are behind the latest barrage of attacks with a...