PT-2026-75511

TuxCare rebuilt connect to address 1 CVE. Fixed in 2.12.0-tuxcare.1...

Car Rental Script 跨站脚本漏洞

Car Rental Script is an open source vehicle rental script from GZ Script. GZ Script Car Rental Script version 1.8 cross-site scripting vulnerability , the vulnerability stems from the parameter firstname/secondname/phone/address1/country cross-site scripting XSS vulnerability...

GZScripts PHP GZ Hotel Booking Script 跨站脚本漏洞

GZScripts is a script from GZScripts Inc. A cross-site scripting vulnerability exists in GZScripts PHP GZ Hotel Booking Script version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname, phone, address1, and country...

GZ Scripts Event Booking Calendar 跨站脚本漏洞

GZ Scripts Event Booking Calendar is an event booking calendar application from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts Event Booking Calendar version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname,...

Time Slot Booking Calendar PHP 跨站脚本漏洞

Time Slot Booking Calendar PHP is a GZ Scripts open source time booking calendar system . GZ Scripts Time Slot Booking Calendar PHP version 1.8 cross-site scripting vulnerability , the vulnerability stems from the file /load.php parameters firstname/secondname/phone/address1/country will lead to...

can override a marketplace

Lines of code Vulnerability details Impact There is no check if there is a market place in the m address and we can override all of the exist market places. Proof of Concept function setMarketPlaceaddress m external authorizedadmin returns bool if marketPlace != address0 revert ExistsmarketPlace;...

PT-2022-28695

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue concerns the reliability of builtin frame address1 in the riscv architecture. It was introduced in version v5.13 and fixed in version v5.15.24. The actual impact and attack...

PT-2022-28772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.9 Description The issue concerns the reliability of builtin frame address1 in the riscv architecture. It was introduced in version v5.13 and fixed in version v5.16.10. The actual impact and attack...

CVE-2018-14541: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

PT-2018-12572

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Basic B2B Script version 2.0.0 Description The issue concerns Reflected and Stored XSS that can be triggered via specific fields, including First name, Last name, Address 1, City, State, and Company name. Recommendations For P...

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...