The vulnerability of the OTRS system’s administration log module allows a violator to disclose protected information.

The vulnerability of the OTRS application’s administration log module is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

PT-2024-39126 · Code Projects · Code-Projects Inventory Management

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management version 1.0 Description: A problematic issue was found in the Registration Form component, specifically in the /view/registration.php file. The issue allows for cross-site scripting when an attacker...

CGA-MGPF-W98G-MQ5P

Bulletin has no description...

PT-2024-38383 · WordPress · Wpcom Member

Name of the Vulnerable Software and Affected Versions: WPCOM Member plugin for WordPress versions up to 1.5.2.1 Description: The issue is due to the plugin allowing arbitrary data to be passed to wp insert user during registration, making it possible for unauthenticated attackers to update their...

The vulnerability of the Cisco Smart License Utility software management software lies in its ability to disclose information through registration files, allowing a violator to gain unauthorized access to confidential information and unauthorized access to the API.

The vulnerability of the Cisco Smart License Utility software relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information and to obtain unauthorized access to...

CVE-2024-44728

Affected software : Sourcecodehero Event Management System 1.0. Vulnerability : Stored Cross-Site Scripting (XSS) in the API endpoint "/clientdetails/admin/regester.php" via the parameters Full Name, Address, Email, and contact#. Root cause / details : Publicly documented as an XSS path; the issu...

PHPGurukul Job Portal 安全漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A security vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the JOBREGID parameter in /jobportal/admin/applicants/controller.php...

How to avoid election related scams

With the US election campaigns at full throttle, scammers have taken a renewed interest in the ways this can be used to defraud people, often using the same tactics legitimate campaigns leverage for support emails, text messages, phone calls, and social media pleas. The lure that we have seen the...

CVE-2024-8102

The CVE-2024-8102 entry concerns The Ultimate WordPress Toolkit – WP Extended plugin for WordPress, affected up to version 3.0.8. The root cause is a missing capability check in the module_all_toggle_ajax() function, enabling authenticated attackers with Subscriber-level access or higher to perfo...

PT-2024-38802 · WordPress · Wp Extended

Name of the Vulnerable Software and Affected Versions: The Ultimate WordPress Toolkit – WP Extended plugin for WordPress versions up to, and including, 3.0.8 Description: The issue is related to unauthorized modification of data that can lead to privilege escalation due to a missing capability...

Online Course Registration 1.0 SQL Injection

============================================================================================================================================= | Title : Online course registartion 1.0 Blind SQl INjection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

CVE-2024-1621

The registration process of uniFLOW Online NT-ware product apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allo...

CVE-2024-1621

The registration process of uniFLOW Online NT-ware product apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allo...

CVE-2024-1621 uniFLOW Online device registration susceptible to compromise

The registration process of uniFLOW Online NT-ware product apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allo...

CVE-2024-1621

The CVE-2024-1621 issue affects uniFLOW Online (NT-ware) where the registration process can be compromised when email login is enabled on the tenant, prior to and including version 2024.1.0. The vulnerability allows an attacker to register themselves against a genuine user, enabling a malicious u...

CVE-2024-1621 uniFLOW Online device registration susceptible to compromise

The registration process of uniFLOW Online NT-ware product apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allo...

CVE-2024-23358 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem...

CVE-2024-23358 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem...

CVE-2024-23358

CVE-2024-23358 affects Qualcomm closed-source modem components. The root cause is reported as incorrect ciphering key data during OTA registration, triggering a transient Denial of Service. The available documents do not specify affected firmware versions, exact product names, or a remediation/pa...

PT-2024-18172 · Nt Ware +1 · Uniflow Online +1

Name of the Vulnerable Software and Affected Versions: uniFLOW Online versions prior to and including 2024.1.0 Description: The registration process of uniFLOW Online apps can be compromised when email login is enabled on the tenant, particularly for those utilizing email login in combination wit...