CVE-2024-24848: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MJS Software PT Sign Ups – Beautiful volunteer sign ups and management made easy allows Stored XSS.This issue affects PT Sign Ups – Beautiful volunteer sign ups and management made easy: from n/a...

WordPress PT Sign Ups Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software PT Sign Ups Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24848 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c0bd535867dc Credits Faizal Abroni Required privilege...

pt.yalanpack.com Cross Site Scripting vulnerability OBB-3834427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-1184 · Bosch · Bosch Nexo Cordless Nutrunner +1

Name of the Vulnerable Software and Affected Versions: Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified Description: The issue allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Cod...

PT-2024-12412 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while processing a WMI P2P listen start command 0xD00A sent from a host. Recommendations: At the moment, there is no...

PT-2023-31828 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an out of bounds read vulnerability. Successful exploitation of this vulnerability could cause an information leak. Recommendations: At the moment, there is n...

PT-2023-35666 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs due to a crash in the EscherContainerRecord.fillFields function. The issue is related to the org.apache.poi.ddf.EscherContainerRecord and...

CVE-2023-7075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cross site scripting. The attack may be...

PT-2023-32830

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A malicious user could use this issue to access internal HTTPs servers. In the worst case, such as an AWS instance, it could be abused to get a remote cod...

PT-2023-7887 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7-rc5 Linux kernel versions 5.6 through 5.10.203 Linux kernel versions 5.6 through 5.15.142 Linux kernel versions 5.6 through 6.1.67 Linux kernel versions 5.6 through 6.6.6 Description: A use-after-free...

PT-2023-7751 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to bypass security restrictions...

PT-2023-7905 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 Description: The issue is related to multiple memory corruption problems that have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination...

PT-2023-24080 · Mediatek · Mediatek Chipset

Name of the Vulnerable Software and Affected Versions: MediaTek Chipset affected versions not specified Description: In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2023-48737

CVE-2023-48737 refers to a Cross-Site Scripting (XSS) vulnerability in the TriPay Payment Gateway WordPress plugin. Affected: TriPay Payment Gateway versions up to and including 3.2.7. Root cause: improper neutralization of input during web page generation leading to stored XSS. Impact per source...

CVE-2023-48737: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

PT-2023-14135 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to information disclosure. No further details are provided about the nature of the disclosure or its potential impact. Recommendations: At the moment, there is ...

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software lies in the absence of a “secure” flag in session cookies, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software is related to the absence of a “secure” flag in the session cookie files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

cuco.softi9.pt Cross Site Scripting vulnerability OBB-3777547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moxa PT-G503 Series Sensitive Cookie Not Properly Secured (CVE-2023-5035)

A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks,...

Moxa PT-G503 Series Sensitive Cookie Not Properly Secured (CVE-2023-4217)

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation. This...