Aggregator

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/view_csprofile.php. The manipulation of the argument id leads to sql injection. The identification of this vulnerability is CVE-2024-7931. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/get_packings.php. The manipulation of the argument medicine_id leads to sql injection. This vulnerability was named CVE-2024-7930. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #392942 / VDB-275117

Submit #392935 / VDB-272123

Submit #392934 / VDB-275116

Flight tracking platform FlightAware is asking some users to reset their account login passwords due to a data security incident that may have exposed personal information. [...]

Toyota’s U.S. branch has reportedly suffered a massive data breach, resulting in the unauthorized release of approximately 240 GB of sensitive information. The breach, allegedly perpetrated by the notorious hacker group ZeroSevenGroup, has exposed a wide array of data, posing serious security risks for the automotive giant and its stakeholders. Details of the Breach According […]

The post TOYOTA Data Breach – Hackers Group Leaked 240 GB of Data Online appeared first on Cyber Security News.

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-7929. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The US needs to seize this moment to set a global standard for responsible and ethical AI, ensuring that technological progress upholds and advances human rights.

Submit #392700 / VDB-271373

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. This vulnerability is handled as CVE-2024-7928. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Submit #392325 / VDB-275115

前段时间差旅较多，尝试了只带 iPad 办公，记录下感受，供朋友们参考。

Submit #392202 / VDB-275114

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. This vulnerability is known as CVE-2024-7927. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/about_edit.php?action=modify. The manipulation of the argument skin leads to path traversal. This vulnerability is traded as CVE-2024-7926. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The identification of this vulnerability is CVE-2024-7925. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. This vulnerability was named CVE-2024-7924. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #392186 / VDB-275113