PT-2023-32825

Name of the Vulnerable Software and Affected Versions MLflow affected versions not specified Description The issue allows attackers to gain full command execution on the victim system with only one user interaction, which involves downloading a malicious config. This is related to a Command...

PT-2023-8082 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: Totolink A7100RU version 7.4cu.2313 B20191024 Description: A critical issue has been found in the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag...

PT-2023-31259 · Voltronic Power · Voltronic Power Snmp Web Pro

Name of the Vulnerable Software and Affected Versions: Voltronic Power SNMP Web Pro version 1.1 Description: The issue allows an attacker to execute arbitrary code via a crafted script within a request to the webserver. This is a Cross Site Scripting XSS issue. Recommendations: For Voltronic Powe...

PT-2023-31453 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function formRebootMeshNode. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the...

PT-2023-7508 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.46 Description: The issue is related to a command injection vulnerability in the mac parameter at the "/goform/SetOnlineDevName" API endpoint. This vulnerability is due to the lack of input validation when...

PT-2023-31212 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the set wan status function. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the set wan status...

CVE-2023-3277

The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's...

PT-2023-32194 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZZCMS version 2.2.0 Description: A vulnerability has been found in the Personal Profile Page component of ZZZCMS, which affects some unknown processing and leads to basic cross-site scripting. The attack may be initiated remotely. The exploi...

PT-2023-26610 · Inspect Element · Echo.Ac

Name of the Vulnerable Software and Affected Versions: Inspect Element Ltd Echo.ac version 5.2.1.0 Description: An issue in Inspect Element Ltd Echo.ac allows a local attacker to gain privileges via a crafted command to the echo driver.sys component. This issue has been reportedly used by various...

PT-2023-32046 · Sato · Sato Cl4Nx-J Plus

Name of the Vulnerable Software and Affected Versions: SATO CL4NX-J Plus version 1.13.2-u455 r2 Description: A vulnerability was found in the SATO CL4NX-J Plus, affecting some unknown functionality of the file /rest/dir/. The manipulation of the full argument leads to path traversal. The attack...

PT-2023-31941 · Unknown · Himitzh Hoj

Name of the Vulnerable Software and Affected Versions: HimitZH HOJ versions up to 4.6-9a65e3f Description: A critical issue has been found in the Topic Handler component, leading to a sandbox issue. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

PT-2023-8074 · Sourcecodester · Sourcecodester Simple Book Catalog App

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Book Catalog App version 1.0 Description: A vulnerability has been found in the Update Book Form component of the SourceCodester Simple Book Catalog App. The manipulation of the book title and book author arguments leads...

PT-2023-30453 · Byzoro · Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230822 Description: A critical issue affects some unknown functionality of the file /importexport.php, leading to sql injection. The attack can be...

PT-2023-27673 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue is related to a Buffer Overflow that occurs via the function "initIpAddrInfo". This function reads in a user-provided parameter and passes the variable without...

PT-2023-29100 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200L version EN V9.3.5u.6146 B20201023 Description: A critical issue was found, affecting the setDiagnosisCfg function, which leads to os command injection. This can be initiated remotely. Recommendations: For TOTOLINK EX1200L...

PT-2023-26793 · Ntsc-Crt · Ntsc-Crt

Name of the Vulnerable Software and Affected Versions: NTSC-CRT version 2.2.1 Description: The issue is related to an integer overflow and out-of-bounds write in the loadBMP function in bmp rw.c. This occurs because the file's width, height, and BPP are not validated. The vendor notes that the ma...

PT-2023-4371 · Microsoft · Windows Fax Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Service affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Fax Service, allowing remote attackers to execute arbitrary code on the system. This issue can be...

PT-2023-27845 · Phpjabbers · Php Jabbers Rental Property Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Rental Property Booking version 2.0 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /index.php. The manipulation of the index argument leads to cross-site scripting...

PT-2023-26794 · Gnu +3 · Gdb +3

Name of the Vulnerable Software and Affected Versions: GNU gdb GDB version 13.0.50.20220805-git Description: A stack overflow issue was discovered in the function ada decode at /gdb/ada-lang.c. This issue affects the GNU gdb GDB debugger. Recommendations: For GNU gdb GDB version...

PT-2023-5381 · D Link · D-Link Dwl-6610Ap

Name of the Vulnerable Software and Affected Versions: D-LINK DWL-6610 version 4.3.0.8B003C Description: The issue is related to a command injection vulnerability in the config upload handler function. This vulnerability allows attackers to execute arbitrary commands via the configRestore...