CVE-2024-48779

An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platformpluginpath parameter to specify that the qt plugin loads the directory...

CVE-2024-48779

An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platformpluginpath parameter to specify that the qt plugin loads the directory...

CVE-2024-48779

An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platformpluginpath parameter to specify that the qt plugin loads the directory...

PT-2024-33215

Name of the Vulnerable Software and Affected Versions Wanxing Technology's Yitu project Management Software version 3.2.2 Description The issue allows a remote attacker to execute arbitrary code via the platformpluginpath parameter, which specifies that the qt plugin loads the directory. This...

CVE-2024-48779: Undefined Security Weakness

An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platformpluginpath parameter to specify that the qt plugin loads the directory...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the absence of an authentication process that allows unauthorized users to elevate their privileges.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

kanboard -- Project Takeover via IDOR in ProjectPermissionController

[email protected] reports: Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser. The users permission to add users to a project only get checked on the URL parameter projectid. I...

CVE-2023-33960 OpenProject vulnerable to project identifier information leakage through robots.txt

OpenProject is web-based project management software. For any OpenProject installation, a robots.txt file is generated through the server to denote which routes shall or shall not be accessed by crawlers. These routes contain project identifiers of all public projects in the instance. Prior to...

CVE-2023-32685 Clipboard based cross-site scripting (blocked with default CSP) in Kanboard

Kanboard is project management software that focuses on the Kanban methodology. Due to improper handling of elements under the contentEditable element, maliciously crafted clipboard content can inject arbitrary HTML tags into the DOM. A low-privileged attacker with permission to attach a document...

Projeqtor 安全漏洞

Projeqtor is a PHP-based open source project management software from the Projeqtor community. The software is used to organize various functions required for multiple projects and is suitable for IT projects. A cross-site scripting vulnerability exists in Projeqtor 9.3.1 that allows an attacker ...

Sql injection

OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in...

The vulnerability of the project management software Renleilei1992 Linux_Network_Project, caused by buffer overflows, allows an attacker to execute arbitrary code.

The vulnerability of the Renleilei1992 LinuxNetworkProject project management software is caused by a buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

JetBrains YouTrack Cross-Site Scripting Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack, which stems from...

Kanboard has a weak password vulnerability

Kanboard is a free open source Kanban project management software. Kanboard has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in Jinshi Project Management Software of Dongying Jinshi Software Co.

Jinshi project management software is Jinshi software company to many construction enterprise management status quo as the starting point to create an information technology internal control management platform. There is a directory traversal vulnerability in Dongying Jinshi Software Company...

Unspecified Vulnerability in JetBrains YouTrack (CNVD-2021-09914)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.6.1767, which stems from a...

Unauthorized Access Vulnerability in Zendo Project Management Software

Zendo Project Management Software is homegrown open source project management software. Zendo Project Management Software has an unauthorized access vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information and perform unauthorized operations...

Command Execution Vulnerability in Zendo Backend of Qingdao Easoft Tianchuang Network Technology Co.

Zendo is a home-grown project management software. There is a command execution vulnerability in the backend of Zendo, which can be exploited by attackers to obtain server control privileges...

Command execution vulnerability in Zendo Enterprise 4.0.3 backend

Zendo Enterprise is a project management software. A command execution vulnerability exists in the backend of Zendo Enterprise Edition 4.0.3, which can be exploited by attackers to gain control of the server...

The vulnerability of the qdPM project management software lies in its ability to download files of a malicious nature without limitation, allowing a hacker to execute arbitrary code on the target system.

The vulnerability of the qdPM project management software is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by loading a specially created malicious PHP file remotely...