PT-2024-15644 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System versions up to 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. This issue affects an unknown part of the file propertydetail.php. The manipulatio...

PT-2024-14358 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: The issue affects the "Update Artist Image" functionality, where the imageid parameter is vulnerable to SQL Injection. This allows an attacker to inject malicious SQL code,...

PT-2024-15589 · Unknown · Code-Projects Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A vulnerability was found in the code-projects Dormitory Management System, affecting some unknown processing of the file modifyuser.php. The manipulation of the argument mnam...

PT-2024-14008 · Gl.Inet · Gl.Inet

Name of the Vulnerable Software and Affected Versions: GL.iNet devices versions prior to 4.5.0 Description: An issue was discovered where GL.iNet devices assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass...

PT-2024-15582 · Code Projects · Code-Projects Employee Profile Management System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Profile Management System version 1.0 Description: A problematic vulnerability was found in the code-projects Employee Profile Management System. This issue affects the file download.php, where the manipulation of the...

PT-2024-15591 · Code Projects · Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A critical vulnerability was found in the Dormitory Management System. The issue affects an unknown functionality of the file login.php. The manipulation of the username...

PT-2024-19623 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the hostName parameter in the setWanCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK A3300R version...

PT-2024-19649 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the pass parameter in the setTr069Cfg function. This allows for potential exploitation. No information is provided about the estimated...

PT-2024-14345 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.city.vlan parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround,...

PT-2024-14341 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.city.vlan parameter in the formSetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround,...

PT-2024-14348 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.city.vlan parameter in the setIptvInfo function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

PT-2024-14343 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.stb.port parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround, consider restrictin...

PT-2024-14356 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that occurs in the getIptvInfo function. This overflow is triggered via the adv.iptv.stbpvid parameter. Recommendations: For Tenda AX1803 version 1.0.0.1,...

PT-2024-14342 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.mode parameter in the formGetIptv function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

PT-2024-2549 · Freeipa +8 · Freeipa +8

Name of the Vulnerable Software and Affected Versions: FreeIPA versions all supported versions Description: A Cross-site request forgery vulnerability exists in the "ipa/session/login password" endpoint, allowing an attacker to trick the user into submitting a request that could perform actions a...

PT-2024-2753 · Isc +12 · Bind 9 +12

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.0.0 through 9.16.45 BIND 9 versions 9.18.0 through 9.18.21 BIND 9 versions 9.19.0 through 9.19.19 BIND 9 versions 9.9.3-S1 through 9.11.37-S1 BIND 9 versions 9.16.8-S1 through 9.16.45-S1 BIND 9 versions 9.18.11-S1 through...

PT-2024-13706 · Trendnet · Trendnet Tv-Ip1314Pi

Name of the Vulnerable Software and Affected Versions: TRENDnet TV-IP1314PI version 5.5.3 200714 Description: An issue was discovered where command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings. Recommendations:...

PT-2024-2793 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is related to a path traversal vulnerability in the svc supportassist utility of Dell Unity. An authenticated attacker could potentially exploit this vulnerability to gain unauthorized...

PT-2024-12147 · Easyxdm · Easyxdm

Name of the Vulnerable Software and Affected Versions: easyXDM version 2.5 Description: The issue allows for cross-site scripting XSS attacks via the xdm e parameter. This means an attacker could potentially inject malicious scripts into a website, affecting users who visit the site...

PT-2024-1072 · Totolink · Totolink N200Re

Name of the Vulnerable Software and Affected Versions: Totolink N200RE version 9.3.5u.6139 B20201216 Description: A critical issue affects the setTracerouteCfg function of the /cgi-bin/cstecgi.cgi file, allowing remote attackers to exploit the vulnerability. The manipulation of the command argume...