PT-2023-32904

Name of the Vulnerable Software and Affected Versions code-projects Client Details System version 1.0 Description A problematic issue exists in code-projects Client Details System version 1.0, affecting some unknown functionality within the /admin/regester.php file. Manipulation of the fname,...

GHSA-7M7H-RGVP-3V4R hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service DoS via manipulation of the first two parameters...

Hutool Security Vulnerabilities

Hutool is a small but complete Java tool library from the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.23, which stems from an infinite loop in the StrSplitter.splitByRegex function. An attacker can exploit the vulnerability to trigger a Denial of Service DoS ...

Sql injection

The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address...

CVE-2023-49954: Improper Neutralization of Special Elements used in an SQL Command

The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address...

CVE-2023-49954

The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address...

CVE-2023-48690

creationtimestamp| type| source ---|---|--- 2023-12-21 22:27:24+00:00| seen| https://t.me/ctinow/158003 2023-12-29 17:17:08+00:00| seen| https://t.me/ctinow/160604...

CVE-2023-48810

creationtimestamp| type| source ---|---|--- 2023-12-21 14:42:42+00:00| seen| https://t.me/ctinow/157719...

UBUNTU-CVE-2023-51384

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS11-hosted private keys, these constraints are only applied to the first key, even if a PKCS11 token returns multiple keys...

DEBIAN-CVE-2023-50762

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is because the text was interpreted as a MIME message and the first paragraph was always treated as an email header section. A digitally signed text from a...

Mozilla Thunderbird Security Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla Thunderbird version 115.6, which...

DEBIAN-CVE-2023-51384

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS11-hosted private keys, these constraints are only applied to the first key, even if a PKCS11 token returns multiple keys...

CVE-2023-51384

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS11-hosted private keys, these constraints are only applied to the first key, even if a PKCS11 token returns multiple keys...

ALPINE-CVE-2023-51384

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS11-hosted private keys, these constraints are only applied to the first key, even if a PKCS11 token returns multiple keys...

CVE-2023-49843

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

CVE-2023-49843

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

CVE-2023-49843

CVE-2023-49843: Cross-Site Request Forgery in WordPress plugin First Order Discount Woocommerce (

CVE-2023-49843: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

Missing Critical Step in Authentication

Overview Affected versions of this package are vulnerable to Missing Critical Step in Authentication due to improper enforcement of security constraints on PKCS11-hosted private keys. An attacker can bypass intended security restrictions by exploiting the issue where only the first key is...