3287 matches found
CVE-2024-13017
PHPGurukul Maid Hiring Management System 1.0 is affected by a cross-site scripting vulnerability in /admin/aboutus.php via the title parameter. The issue is exploitable remotely (network vector) and described as requiring user interaction in some sources, with the impact limited to the affected p...
CVE-2024-13013
A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /admin/contactus.php of the component Contact Us Page. The manipulation of the argument page title leads to cross site scripting. It is...
CVE-2024-13013
PHPGurukul Maid Hiring Management System 1.0 is affected by a cross-site scripting vulnerability in the /admin/contactus.php component (page title parameter). The issue arises from manipulation of the page title argument, enabling remote exploitation. Multiple sources confirm the vulnerability's ...
PT-2024-17875 · Unknown · Phpgurukul Maid Hiring Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Maid Hiring Management System. It affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulati...
PT-2024-17871 · Unknown · Phpgurukul Maid Hiring Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A problem was found in the Contact Us Page component, specifically in the /admin/contactus.php file. The issue arises from the manipulation of the page title argument, leading ...
The Worst Hacks of 2024
From Chinese cyberspies breaching US telecoms to ruthless ransomware gangs disrupting health care for millions of people, 2024 saw some of the worst hacks, breaches, and data leaks ever...
Spyware Maker NSO Group Found Liable for Hacking WhatsApp
A judge has found that NSO Group, maker of the Pegasus spyware, has violated the US Computer Fraud and Abuse Act by hacking WhatsApp in order to spy on people using it. Jon Penney and I wrote a legal paper on the case...
TP-Link faces US national security probe, potential ban on devices
The US government launched a national security investigation into the popular, Chinese-owned router maker TP-Link, with a potential eye on banning the company's devices in the United States. The investigation comes amid heightened tension between the US and the Chinese government, and after a...
The Top Cybersecurity Agency in the US Is Bracing for Donald Trump
Staffers at the Cybersecurity and Infrastructure Security Agency tell WIRED they fear the new administration will cut programs that keep the US safe—and “persecution.”...
CVE-2024-12523 States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The States Map US plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'statesmap' shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2024-17639 · WordPress · States Map Us
Name of the Vulnerable Software and Affected Versions: The States Map US plugin for WordPress versions up to, and including, 2.4.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the states...
Why the US Military Can't Just Shoot Down the Mystery Drones
Small, easily weaponizable drones have become a feature of battlefields from the Middle East to Ukraine. Now the threat looms over the US homeland—and the Pentagon's ability to respond is limited...
US Sanctions Chinese Cybersecurity Firm for Firewall Exploit, Ransomware Attacks
SUMMARY The United States has taken strong action against a Chinese cybersecurity company, Sichuan Silence Information Technology, for…...
TikTok ban in US: Company seeks emergency injunction to prevent it
TikTok has requested an emergency injunction to stop or postpone the planned ban on the platform in the US. Back in March, the House of Representatives passed a bill that would effectively ban TikTok from the US unless Chinese owner ByteDance agreed to give up its share of the immensely popular...
Chinese Hackers Breach US Firm, Maintain Network Access for Months
SUMMARY A large U.S. company with operations in China fell victim to a large-scale cyberattack earlier this year,…...
FTC Says Data Brokers Unlawfully Tracked Protesters and US Military Personnel
The FTC is targeting data brokers that monitored people’s movements during protests and around US military installations. But signs suggest the Trump administration will be far more lenient...
The US Army's Vision of Soldiers in Exoskeletons Lives On
Following decades of failed attempts and dashed dreams, the US Army is once again trying out powered exoskeletons to help soldiers haul munitions and equipment in the field...
NSO Group Spies on People on Behalf of Governments
The Israeli company NSO Group sells Pegasus spyware to countries around the world including countries like Saudi Arabia, UAE, India, Mexico, Morocco and Rwanda. We assumed that those countries use the spyware themselves. Now we've learned that that's not true: that NSO Group employees operate the...
SMA Solar多款产品 SQL注入漏洞
SMA Solar Sunny Central SC 1760-US and others are a solar inverter from SMA Solar, Germany. A SQL injection vulnerability exists in various SMA Solar products. An attacker could exploit the vulnerability to gain read and write access to device-specific log files. The following products are...