PT-2023-3826 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with insufficient access control. This vulnerability can be exploited to...

PT-2023-3864 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Authentication component of the Windows operating system. It can be exploited by a remote attacker to launch a...

PT-2023-3853 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Install Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows operating system installer, which can be exploited to elevate privileges. This allows an attacker t...

informatica24.pt Cross Site Scripting vulnerability OBB-3440841

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-3401 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to execute...

PT-2023-3219

Name of the Vulnerable Software and Affected Versions Microsoft .NET and Visual Studio affected versions not specified Description The issue is related to insufficient access restrictions in Microsoft Visual Studio and the Microsoft .NET platform. Exploitation of this issue may allow an attacker ...

PT-2023-3180 · Microsoft · Windows Bus Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bus Filter Driver affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Bus Filter driver of Windows operating systems. This can allow an attacker to...

PT-2023-11996

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about a specific issue, estimated number ...

PT-2023-11981

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not assigne...

PT-2023-11919

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability, but rather indicates that a candidate number is unused and should not be used. There is no...

PT-2023-10680

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate number from the National...

PT-2023-15638 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges...

pt-global.org Cross Site Scripting vulnerability OBB-3290986

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-23163 · Engine.Io +2 · Engine.Io +2

Content removed...

Malicious code in ozstesting-pt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd890b0f1505256856827c172f048855f0dff526343f90fafb44920827544ff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-665 Malicious code in ozstesting-pt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd890b0f1505256856827c172f048855f0dff526343f90fafb44920827544ff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-17684 · Unknown · Spring Boot

Name of the Vulnerable Software and Affected Versions: Spring Boot versions 3.0.0 through 3.0.5 Spring Boot versions 2.7.0 through 2.7.10 Spring Boot older unsupported versions Description: An application that is deployed to Cloud Foundry could be susceptible to a security bypass. Recommendations...

WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Stock Exporter for WooCommerce Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30871 Patch priority Medium CVSS severity Medium 7.1 Developer PT Woo Plugins by Webdados PSID 0972015716d1...

PT-2023-20117

Name of the Vulnerable Software and Affected Versions Apache Superset versions up to and including 2.0.1 Description A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset feature to conduct Server-Side Request Forgery attacks a...

PT-2023-2309 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows kernel, allowing an attacker to elevate their privileges. This can impact the system, potentially enabling unauthorized...