PT-2025-02: Access to files or directories to external paties in TCPDF

The vulnerability was identified in TCPDF, version 6.8.0. The discovered vulnerability allows an attacker to transmit a specially created HTML file containing an image in Base64 format. Using the specified payload, the attacker can access an arbitrary image outside of the directory. Vulnerability...

PT-2024-67: XSS Bypass sanitizer using the javascript protocol and special characters in PhpSpreadsheet

The vulnerability was identified in PhpSpreadsheet , versions = 3.0.0, = 2.0.0, = 2.2.0, = 3.0.0, = 2.0.0, = 2.2.0, = 2.3.4 to 2.3.5 or higher Additional information: Security advisory Researcher: Aleksey Solovev Positive Technologies...

PT-2024-53: Reading arbitrary files via API in PT Application Inspector (PT AI)

The vulnerability was identified in PT Application Inspector PT AI, versions 4.4.0 - 4.9.0 inlusevely. The discovered vulnerability allows an attacker with network access to PT AI to read source code files of other users' projects. The vulnerability can be used for privilege escalation...

PT-2024-54: Reflected Cross-Site Scripting (Reflected XSS) in Moodle

The vulnerability was identified in Moodle versions 4.5; 4.4 - 4.4.4; 4.3 - 4.3.8. The discovered vulnerability, which exists due to a lack of filtering during course editing, can be exploited by an attacker to embed an arbitrary JavaScript code into the body of a page. Vulnerability status:...

PT-2024-30: Stored DOM-Based Cross-Site Scripting (stored DOM XSS) in Passwork

The vulnerability was identified in Passwork version 6.4.0. The application does not process the data received from the user, which is necessary for safety use during web page formation. Exploitation of the vulnerability is possible for an authorized user and leads to the possibility of executing...

PT-2024-33: Business logic vulnerability in Passwork

The vulnerability was identified in Passwork version 6.4.0. The application's logic requires the user to perform a correct sequence of actions to implement the functionality. The vulnerability in the business logic can be exploited by an attacker to gain access to the application's functionality...

PT-2024-24: Local privilege escalation (LPE) in ESET products

The vulnerability was identified in the following products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate ESET Small Business Security and ESET Safe Server ESET Endpoint Antivirus and ESET Endpoint Security for Windows ESET Server Security for...

CVE-2024-8042

Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty user group being added to the incorrect...

PT-2024-58: Insecure password storage in Yealink Meeting Server (YMS)

The vulnerability was identified in Yealink Meeting Server YMS, versions V26.0.0.67. The discovered vulnerability allows an attacker to obtain static key data, allowing user passwords to be decrypted. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 06.06.2024...

uva-bits.nl Cross Site Scripting vulnerability OBB-2649578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-13: Stored Cross-Site Scripting (Stored XSS) in ZoneMinder

The vulnerability was identified in ZoneMinder versions up to 1.36.14. The «Stored XSS» vulnerability allows a remote attacker to perform cross-site scripting XSS attacks. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 27.05.2022 Recommendations: Update to version...

PT-2022-07: Insufficient authentication in Veeam Backup & Replication

The vulnerability was identified in Veeam Backup & Replication versions 9.5, 10, 11. The discovered vulnerability allows an attaker to authenticate using a NULL-session. This may lead to gaining control over the target system. Vulnerability status: Confirmed by vendor Date of vulnerability...

estudis.uoc.edu XSS vulnerability

Open Bug Bounty ID: OBB-616089 Description| Value ---|--- Affected Website:| estudis.uoc.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...