PT-2024-22959 · Unknown · Zly2006 Reden

Name of the Vulnerable Software and Affected Versions: zly2006 Reden versions prior to 0.2.514 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the DEBUG RTC REQUEST SYNC DATA in KeyCallbacks.kt. This enables the attacker to potentially access and...

PT-2024-21958 · Prestashop · Apaczka Plugin

Name of the Vulnerable Software and Affected Versions: Apaczka plugin for PrestaShop versions v1 through v4 Description: The issue is related to improper access control in the Apaczka plugin for PrestaShop, allowing unauthorized information gathering from saved templates without the need for...

PT-2024-10791 · Unknown · Zoneminder

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.34.21 Description: The issue allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the PHP SELF component in the classic/views/download.php file. This is a...

PT-2024-4533 · Ibm · Ibm Websphere Application Server Liberty

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 18.0.0.2 through 24.0.0.4 Description: The issue is related to an uncontrolled allocation of resources, which can be exploited by a remote attacker to cause a denial of service. This is achiev...

PT-2024-24670 · Sourcecodester · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System. The problem is related to an unknown function of the file admin/edit admin...

PT-2024-24101 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic vulnerability was found in DedeCMS, affecting unknown code of the file /src/dede/makehtml map.php. This issue leads to cross-site request forgery and can be initiated remotely. The exploit has be...

PT-2024-2667

Name of the Vulnerable Software and Affected Versions Flowmon versions prior to 11.1.14 and 12.3.5 Description A command injection vulnerability has been identified in Flowmon, allowing an unauthenticated user to gain entry to the system via the management interface and execute arbitrary system...

PT-2024-22895 · Alldata · Alldata

Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: An issue in Alldata allows an attacker to run arbitrary commands via the processId parameter. Recommendations: For Alldata version 0.4.6, avoid using the processId parameter until a fix is available. As a...

PT-2024-23645 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the /admin/edit virtual site info.php API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to...

PT-2024-14297 · Heimdal · Heimdal

Name of the Vulnerable Software and Affected Versions: Heimdall versions prior to 2.5.7 Description: The issue concerns a flaw in the Icon Handler that could lead to privilege escalation. This could potentially be exploited through a local network attack. There is currently no known exploit for...

CVE-2024-29890 Remote code execution in datalens-ui

DataLens is a business intelligence and data visualization system. A specifically crafted request allowed the creation of a special chart type with the ability to pass custom javascript code that would later be executed in an unprotected sandbox on subsequent requests to that chart. The problem w...

PT-2024-23373 · Ghozylab · Web Icons

Name of the Vulnerable Software and Affected Versions: GhozyLab, Inc. Web Icons versions n/a through 1.0.0.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2024-22447 · WordPress · Responsive

Name of the Vulnerable Software and Affected Versions: The Responsive theme for WordPress versions up to, and including, 5.0.2 Description: The issue allows unauthorized modification of data due to a missing capability check on the save footer text callback function. This makes it possible for...

PT-2024-2457 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is related to a stack overflow vulnerability in the fromDhcpListClient function, specifically with the page parameter. This vulnerability can be exploited by a remote attacker using a...

PT-2024-22534

Name of the Vulnerable Software and Affected Versions CRMEB Java e-commerce system version 1.3.4 Description The issue allows an attacker to execute arbitrary code via the groupid parameter, potentially leading to unauthorized access and data manipulation. Recommendations For CRMEB Java e-commerc...

PT-2024-23077 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. This issue can be exploited remotely...

PT-2024-23008 · Mollie · Doneren Met Mollie

Name of the Vulnerable Software and Affected Versions: Doneren met Mollie versions 2.10.2 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. There is no information...

PT-2024-23236 · Elementor · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: Element Pack Elementor Addons versions through 5.5.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2024-23286 · Appneta +2 · Appneta Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: appneta tcpreplay versions up to 4.4.4 Description: A vulnerability was found in appneta tcpreplay, affecting the function get layer4 v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking...

PT-2024-22826 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-9289 Synology Surveillance Station versions prior to 9.2.0-11289 Description: The issue is related to an SQL Injection vulnerability in the SnapShot.CountByCategory webapi component. This...