CVE-2024-27744

CVE-2024-27744 is a stored Cross-Site Scripting vulnerability in Petrol Pump Management Software v1.0. The issue arises from user-supplied input to the image parameter in profile.php, enabling an attacker to execute arbitrary code when the crafted payload is processed (e.g., SVG uploads). Public ...

CVE-2024-27743

Petrol Pump Management Software v1.0 is affected by a stored Cross-Site Scripting vulnerability in the add_invoices.php component, triggered via the Address field. The underlying issue is unsanitized user input leading to script execution when the stored value is rendered (e.g., in the manage_inv...

CVE-2024-27747

Petrol Pump Management Software v1.0 (vendor mayuri_k) contains a file-upload vulnerability in profile.php via the Image parameter in the email field, enabling remote code execution. Root cause: insufficient validation of uploaded content allows uploading a PHP shell (as shown by PoCs) which can ...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

CVE-2024-27746

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

CVE-2024-27746

Petrol Pump Management Software v1.0 is affected by a SQL injection vulnerability that allows an attacker to execute arbitrary code via the email address parameter in index.php. The issue is documented across multiple sources (including CVE-2024-27746 records and Red Hat/CNNVD entries), with high...

CVE-2023-52480 ksmbd: fix race condition between session lookup and expire

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbdsessionlookup | smb2sesssetup sess = xaload | | | xaerase&conn-sessions, sess-id; | | ksmbdsessiondestroysess -- kfreesess | // UAF! |...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...

CVE-2024-1749

CVE-2024-1749 concerns Bdtask Bhojon Best Restaurant Management Software 2.9. The issue is a Cross-Site Scripting in the Message Page component (file /dashboard/message) triggered by manipulation of the Title argument, with network-based remote potential and user interaction required. Affects unk...

PT-2024-18274 · Unknown · Bdtask Bhojon Best Restaurant Management

Name of the Vulnerable Software and Affected Versions: Bdtask Bhojon Best Restaurant Management Software version 2.9 Description: A problematic issue has been found in the software, affecting the processing of the file /dashboard/message of the component Message Page. The manipulation of the...

SLiMS 9 Bulian Security Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version v9.6.1, which stems fro...

Petrol Pump Management Software 1.0 Shell Upload

Exploit Title: Petrol pump management software - File Upload Remote Code Execution RCE unauthenticated Google Dork: N/A Application: Petrol pump management software Date: 20.02.2024 Bugs: File Upload Remote Code Execution RCE unauthenticated Exploit Author: SoSPiro Vendor Homepage:...

Petrol Pump Management Software 1.0 Shell Upload Vulnerability

Exploit Title: Petrol pump management software - File Upload Remote Code Execution RCE unauthenticated Application: Petrol pump management software Date: 20.02.2024 Bugs: File Upload Remote Code Execution RCE unauthenticated Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/...

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming software and Cisco Firepower Management Center’s network management software allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers, as well as the Cisco Firepower Management Center’s network management software, is related to improper code generation. Exploiting this...

Improper access control

Improper access control in some IntelR OptaneTM PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Optane Pmem Security Vulnerability

Intel Optane Pmem is a memory device from Intel Corporation USA. A security vulnerability previously existed in Intel OptaneTM PMem 100 Series Management Software version 01.00.00.3547, which stemmed from improper access control. It could result in an authenticated user potentially being able to...

PT-2024-1873 · Intel · Intel Pm

Name of the Vulnerable Software and Affected Versions: IntelR PM software affected versions not specified Description: The issue is related to improper authorization in some IntelR PM software, which may allow a privileged user to potentially enable escalation of privilege via local access. This...

Intel® Optane™ PMem Management Software Advisory

Summary: Potential security vulnerabilities in some Intel® Optane™ Persistent Memory PMem management software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-22311 Description: Improper acce...

PT-2024-2698 · Intel · Intel Optane Pmem 100 Series Management

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM PMem 100 Series Management Software versions prior to 01.00.00.3547 Description: The issue is related to improper access control in the IntelR OptaneTM PMem 100 Series Management Software, which may allow an authenticated user...

PT-2024-1811 · Microsoft · Azure Kubernetes Service Confidential Containers

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service Confidential Containers affected versions not specified Description: The issue is related to insufficient input validation in the deployment and management software of Azure Kubernetes Service Confidential...