Month: February 2024

Appwrite directory traversal | CVE-2022-25377

February 27, 2024

NAME__________Appwrite directory traversalPlatforms Affected:Appwrite Appwrite 0.5.0 Appwrite Appwrite 0.12.1Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Appwrite could allow a remote attacker to traverse directories...

XWiki SAS Licensing application information disclosure | CVE-2024-26138

February 27, 2024

NAME__________XWiki SAS Licensing application information disclosurePlatforms Affected:XWiki SAS Licensing application 1.0 XWiki SAS Licensing application 1.24.1Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________XWiki SAS...

Helm denial of service | CVE-2024-26147

February 27, 2024

NAME__________Helm denial of servicePlatforms Affected:Helm Helm 3.14.1Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Helm is vulnerable to a denial of service, caused by...

baserCMS cross-site scripting | CVE-2024-26128

February 27, 2024

NAME__________baserCMS cross-site scriptingPlatforms Affected:baserproject baserCMS 5.0.8Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________baserCMS is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Microsoft Edge for Android spoofing | CVE-2024-26188

February 27, 2024

NAME__________Microsoft Edge for Android spoofingPlatforms Affected:Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge for Android could allow a remote attacker to conduct spoofing...

Code-projects Library System SQL injection | CVE-2024-1827

February 27, 2024

NAME__________Code-projects Library System SQL injectionPlatforms Affected:Code-projects Library SystemRisk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Code-projects Library System is vulnerable to SQL injection. A remote...

All In One Favicon plugin for WordPress directory traversal | CVE-2023-24416

February 27, 2024

NAME__________All In One Favicon plugin for WordPress directory traversalPlatforms Affected:WordPress WordPress WordPress All In One Favicon Plugin for WordPress 4.7Risk...

CodeAstro House Rental Management System SQL injection | CVE-2024-1824

February 27, 2024

NAME__________CodeAstro House Rental Management System SQL injectionPlatforms Affected:CodeAstro House Rental Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________CodeAstro House Rental Management System...

Discourse Calendar information disclosure | CVE-2024-26145

February 27, 2024

NAME__________Discourse Calendar information disclosurePlatforms Affected:Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Discourse Calendar could allow a remote authenticated attacker to obtain sensitive information, caused...

Code-projects Library System SQL injection | CVE-2024-1830

February 27, 2024

Code-projects Library System SQL injection | CVE-2024-1828

February 27, 2024

Code-projects Library System SQL injection | CVE-2024-1829

February 27, 2024

Apache James privilege escalation | CVE-2023-51518

February 27, 2024

NAME__________Apache James privilege escalationPlatforms Affected:Apache James 3.7.4 Apache James 3.8.0Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apache James could allow a local authenticated attacker...

Code-projects Library System SQL injection | CVE-2024-1826

February 27, 2024

CodeAstro Simple Voting System | CVE-2024-1823

February 27, 2024

NAME__________CodeAstro Simple Voting SystemPlatforms Affected:CodeAstro Simple Voting System 1.0Risk Level:5.3Exploitability:HighConsequences:Bypass Security DESCRIPTION__________CodeAstro Simple Voting System could allow a remote attacker...

SourceCodester Complete File Management System SQL injection | CVE-2024-1831

February 27, 2024

NAME__________SourceCodester Complete File Management System SQL injectionPlatforms Affected:SourceCodester Complete File Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________SourceCodester Complete File Management System...

Code-projects Crime Reporting System SQL injection | CVE-2024-1821

February 27, 2024

NAME__________Code-projects Crime Reporting System SQL injectionPlatforms Affected:Code-projects Crime Reporting System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Code-projects Crime Reporting System is vulnerable to...

Code-projects Crime Reporting System SQL injection | CVE-2024-1820

February 27, 2024

CodeAstro House Rental Management System cross-site scripting | CVE-2024-1825

February 27, 2024

NAME__________CodeAstro House Rental Management System cross-site scriptingPlatforms Affected:CodeAstro House Rental Management System 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________CodeAstro House Rental Management System...

Month: February 2024

Appwrite directory traversal | CVE-2022-25377

XWiki SAS Licensing application information disclosure | CVE-2024-26138

Helm denial of service | CVE-2024-26147

baserCMS cross-site scripting | CVE-2024-26128

Microsoft Edge for Android spoofing | CVE-2024-26188

Code-projects Library System SQL injection | CVE-2024-1827

All In One Favicon plugin for WordPress directory traversal | CVE-2023-24416

CodeAstro House Rental Management System SQL injection | CVE-2024-1824

Discourse Calendar information disclosure | CVE-2024-26145

Code-projects Library System SQL injection | CVE-2024-1830

Code-projects Library System SQL injection | CVE-2024-1828

Code-projects Library System SQL injection | CVE-2024-1829

Apache James privilege escalation | CVE-2023-51518

Code-projects Library System SQL injection | CVE-2024-1826

CodeAstro Simple Voting System | CVE-2024-1823

SourceCodester Complete File Management System SQL injection | CVE-2024-1831

Code-projects Crime Reporting System SQL injection | CVE-2024-1821

Code-projects Crime Reporting System SQL injection | CVE-2024-1820

CodeAstro House Rental Management System cross-site scripting | CVE-2024-1825

Hunters International Ransomware Victim: Dalmahoy Hotel & Country Club

Hunters International Ransomware Victim: PSI

Hunters International Ransomware Victim: THK Co[.], Ltd[.]

Hunters International Ransomware Victim: Alupar Investimento SA

Hunters International Ransomware Victim: Project M[.]O[.]R[.]E[.]

[LOCKBIT3] – Ransomware Victim: copral[.]com[.]br

[APT73] – Ransomware Victim: www[.]certifiedinfosec[.]com

[BLACKBASTA] – Ransomware Victim: vossko[.]de

[BLACKBASTA] – Ransomware Victim: lornestewartgroup[.]com

[BLACKBASTA] – Ransomware Victim: beko-technologies[.]com

You may have missed