PT-2023-21731 · Pretalx · Pretalx

Name of the Vulnerable Software and Affected Versions: pretalx versions 2.3.1 through 2.3.1 Description: The issue allows path traversal in HTML export, a non-default feature. Organizers can trigger the overwriting of an arbitrary file with the standard pretalx 404 page content. Recommendations:...

PT-2023-22478 · Powerjob · Powerjob

Name of the Vulnerable Software and Affected Versions: PowerJob version 4.3.1 Description: The issue is related to Incorrect Access Control via the create app interface. Recommendations: For PowerJob version 4.3.1, consider restricting access to the create app interface until a fix is available. ...

PT-2023-18335 · WordPress · Taxopress

Name of the Vulnerable Software and Affected Versions: TaxoPress plugin for WordPress versions up to, and including, 3.6.4 Description: The issue is related to Stored Cross-Site Scripting via the Suggest Terms Title field due to insufficient input sanitization and output escaping. This allows...

PT-2023-8606 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.3 XWiki Platform versions prior to 15.0 RC1 Description: The issue allows a user without script or programming rights to execute arbitrary code by adding a new object of type XWiki.SchedulerJobClass to...

PT-2023-18155 · Nuxtlabs · Nuxtlabs/Github-Module

Name of the Vulnerable Software and Affected Versions: nuxtlabs/github-module versions prior to 1.6.2 Description: The issue involves the use of hard-coded credentials in the GitHub repository nuxtlabs/github-module. A hardcoded GitHub token was found in the source code, which had access to...

Access Restriction Bypass

Overview Oracle.ManagedDataAccess is a 100% native code .NET Framework driver for Oracle Database Affected versions of this package are vulnerable to Access Restriction Bypass via the TCPS protocol, that allows component takeover. Remediation Upgrade Oracle.ManagedDataAccess to version 19.18.0,...

PT-2023-12239 · Liferay · Liferay Portal

Name of the Vulnerable Software and Affected Versions: Liferay Portal version 6.2.5 Description: The issue allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. The vendor disputes this issue because the exploit reference link only shows frmfolders.html is...

PT-2023-13659 · Linksys · Linksys Ax3200

Name of the Vulnerable Software and Affected Versions: Linksys AX3200 version 1.1.00 Description: The issue allows OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page. Recommendations: For Linksys AX3200 version 1.1.00, consider restricting acce...

PT-2023-12939 · Mybb · External Redirect Warning Plugin

Name of the Vulnerable Software and Affected Versions: External Redirect Warning Plugin version 1.3 for MyBB Description: The issue concerns a problem where the redirect URL, also known as external.php?url=, is susceptible to XSS. This means an attacker could potentially inject malicious scripts...

PT-2023-17757 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php. The manipulation of the id argument leads to sql...

PT-2023-2749 · D Link · D-Link Dir 819

Name of the Vulnerable Software and Affected Versions: D-Link DIR-819 version 1.06 Description: The issue is related to incorrect resource cleanup, allowing a remote attacker to trigger a Denial of Service via a specially crafted request to the "cgi-bin/webproc?getpage=html/index.html" endpoint...

PT-2023-22443 · Aerocms · Aerocms

Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload, exploiting multiple stored cross-site scripting XSS vulnerabilities. These vulnerabilities are accessible via the...

PT-2023-7825 · Totolink · Totolink X18

Name of the Vulnerable Software and Affected Versions: TOTOLINK X18 version 9.1.0cu.2024 B20220329 Description: The issue is related to a command injection vulnerability in the disconnectVPN function, specifically via the pid parameter. This vulnerability is due to insufficient argument checking,...

PT-2023-14628 · Unknown · Livebox Collaboration Vdesk

Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions vDesk through v018 Description: An issue allows a Bypass of Two-Factor Authentication under the "/api/v1/vdeskintegration/challenge" endpoint. Since only the client-side verifies whether a check was...

PT-2023-17436 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the sort argument in the "/news/list?limit=10&offset=0&order=desc" API endpoint. This can be exploited remotely...

PT-2023-22337 · Unknown · Yoga Class Registration System

Name of the Vulnerable Software and Affected Versions: Yoga Class Registration System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the cid parameter at the "/admin/login.php" API endpoint. Recommendations: For Yoga Class...

PT-2023-17437 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue was found in the software, affecting an unknown functionality of the file "/category/list?limit=10&offset=0&order=desc". The manipulation of the sort argument leads to SQL injection. This...

PT-2023-21215 · Unknown · Dg3450 Cable Gateway

Name of the Vulnerable Software and Affected Versions: DG3450 Cable Gateway version AR01.02.056.18 041520 711.NCS.10 Description: An issue was discovered in the log file download functionality of the troubleshooting logs download.php file, which does not check the session cookie. This allows an...

PT-2023-18790 · Tigergraph · Tigergraph Enterprise Free Edition

Name of the Vulnerable Software and Affected Versions: TigerGraph Enterprise Free Edition versions 3.x Description: The issue allows for unsecured read access to an SSH private key. Any code running as the tigergraph user can read the SSH private key, granting an attacker password-less SSH access...

PT-2023-22329 · Lmxcms · Lmxcms

Name of the Vulnerable Software and Affected Versions: lmxcms version 1.4.1 Description: The issue is a SQL injection vulnerability. It can be exploited via the setbook parameter at the "index.php" endpoint. Recommendations: For lmxcms version 1.4.1, consider restricting access to the setbook...