PT-2022-25797 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.4 Description: The issue is related to cross-origin resource sharing using the bot API. Recommendations: For versions 21.0.0 through 21.0.4, consider restricting access to the bot AP...

PT-2022-5348 · Pjsip +1 · Pjsip +1

Name of the Vulnerable Software and Affected Versions: PJSIP versions prior to 2.13 Description: The issue is related to the incorrect switching from SRTP media transport to basic RTP upon SRTP restart when processing certain packets, causing media to be sent insecurely. This impacts all PJSIP...

PT-2022-34671 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A use-after-free issue was discovered in the efi capsule write function of the EFI capsule loader. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34608 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A memory leak issue was discovered when using the debugfs lookup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-34640 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A memory leak issue was discovered when using the debugfs lookup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-34705 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue is related to an out-of-bounds bug in the snd usb parse audio interface function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-22606

Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description A SQL Injection issue was found in the Bus Pass Management System. The vulnerability can be exploited via the searchdata parameter at the "/buspassms/download-pass.php" API endpoint...

PT-2022-23711 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions prior to 2022.3.0 Description: The issue is related to insufficient sanitization of inputs in the QoE application input field, which could lead to stored and DOM-based XSS attacks. Recommendations: For versions...

PT-2022-26097 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak issue exists in the AP4 StdcFileByteStream::Create function, specifically in the System/StdC/Ap4StdCFileByteStream.cpp file. This issue can lead to memory exhaustion if exploited...

Attacker is able to bypass 2FA verification during 2FA disable due to application logic flaw

Description An attacker is able to bypass 2FA verification during 2FA disable function of user and restrict user from accessing his account due to a application logic flaw Proof of Concept First of all let us consider a scenario where a user has left his account open on a public device library or...

PT-2022-21882 · Projectworlds · Projectworlds Hospital Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System Mini-Project versions prior to 2018-06-17 Description: The issue allows SQL injection via the type parameter in the hms-staff.php file. This could potentially lead to unauthorized access to sensitive...

PT-2022-21783 · Sony · Ps4 +1

Name of the Vulnerable Software and Affected Versions: Sony PS4 and PS5 affected versions not specified Description: A critical issue affects the exFAT Handler component, specifically the UVFAT readupcasetable function. The manipulation of the dataLength argument leads to a heap-based buffer...

PT-2022-19405 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell Networking OS10 versions prior to October 2021 Description: The issue allows a remote, unauthenticated attacker to potentially exploit it by reverse engineering to retrieve sensitive information and access the REST API with admin...

PT-2022-22684 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 7.0 through 9.0 Description: The issue allows an attacker with local network access to exploit the server-side request forgery SSRF vulnerability by sending a specially crafted request, potentially...

PT-2022-21133 · Bytebase · Bytebase

Name of the Vulnerable Software and Affected Versions: Bytebase affected versions not specified Description: The Bytebase application does not restrict low privilege users from accessing admin projects, allowing unauthorized users to view projects created by Admin. The affected endpoint is...

PT-2022-16225 · Ece · Ece

Name of the Vulnerable Software and Affected Versions: ECE versions prior to 3.1.1 Description: A flaw was discovered that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster. Recommendations: For versio...

PT-2022-25277 · Ec Cube · Ec-Cube

Name of the Vulnerable Software and Affected Versions: EC-CUBE versions 3.0.0 through 3.0.18-p4 EC-CUBE versions 4.0.0 through 4.1.2 Description: A directory traversal issue allows a remote authenticated attacker with administrative privileges to obtain the product's directory structure...

PT-2022-25357 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is a SQL injection vulnerability. It can be exploited via the id parameter at the "/admin/up booking.php" API endpoint. Recommendations: For Online Tours & Travels...

PT-2022-25624 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete leave type" API endpoint. This allows for potential exploitation. No information is...

PT-2022-25199 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/update currency.php" API endpoint. Recommendation...