CVE-2024-1007
published 2024-01-29CVE-2024-1007: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file…
PriorityP345high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.59%
44.1th percentile
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file edit_profile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252276.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| razormist | employee_management_system | — | — |
| sourcecodester | employee_management_system | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Kernel
Merge branch 'tap-tun-harden-by-dropping-short-frame'
kernel_security·2024-07-25·CVSS 7.1
CVE-2024-41090 [HIGH] Merge branch 'tap-tun-harden-by-dropping-short-frame'
Merge branch 'tap-tun-harden-by-dropping-short-frame'
Dongli Zhang says:
tap/tun: harden by dropping short frame
This is to harden all of tap/tun to avoid any short frame smaller than the
Ethernet header (ETH_HLEN).
While the xen-netback already rejects short frame smaller than ETH_HLEN ...
914 static void xenvif_tx_build_gops(struct xenvif_queue *queue,
915 int budget,
916 unsigned *copy_ops,
917 unsigned *map_ops)
918 {
... ...
1007 if (unlikely(txreq.size vif->dev,
1009 "Bad packet size: %d\n", txreq.size);
1010 xenvif_tx_err(queue, &txreq, extra_count, idx);
1011 break;
1012 }
... the short frame may not be dropped by vhost-net/tap/tun.
This fixes CVE-2024-41090 and CVE-2024-41091.
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Jaku
GHSA
GHSA-pcgj-qq2c-qx79: A vulnerability was found in SourceCodester Employee Management System 1
ghsa_unreviewed·2024-01-29
CVE-2024-1007 [MEDIUM] CWE-89 GHSA-pcgj-qq2c-qx79: A vulnerability was found in SourceCodester Employee Management System 1
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file edit_profile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252276.
Suricata
GPL EXPLOIT /msadc/samples/ access
suricata·2010-09-23
CVE-1999-0736 GPL EXPLOIT /msadc/samples/ access
GPL EXPLOIT /msadc/samples/ access
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"GPL EXPLOIT /msadc/samples/ access"; flow:established,to_server; http.uri; content:"/msadc/samples/"; nocase; reference:bugtraq,167; reference:cve,1999-0736; reference:nessus,1007; classtype:web-application-attack; sid:2101401; rev:12; metadata:created_at 2010_09_23, cve CVE_1999_0736, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)
No public exploits indexed.
No writeups or analysis indexed.
2024-01-29
Published