PT-2023-32427 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/students/manage academic.php. The manipulation of the id argument leads to SQL...

PT-2023-6821 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev605-gfc9e29089-master Description: The issue is related to a buffer overflow in the gf isom find od id for track function of the GPAC multimedia platform. This can lead to a denial of service. The vulnerable function i...

PT-2023-28713 · Unknown · Franfinance

Name of the Vulnerable Software and Affected Versions: franfinance versions prior to 2.0.27 Description: The issue allows a remote attacker to execute arbitrary code via the validation.php and controllers/front/validation.php components. Recommendations: For versions prior to 2.0.27, update to...

PT-2023-23234 · Wpforms +1 · Wpforms +2

Name of the Vulnerable Software and Affected Versions: Database for Contact Form 7, WPforms, Elementor forms versions 1.3.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQ...

PT-2023-28590 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.6.0-beta.1 Description: BigBlueButton is an open-source virtual classroom. It has a path traversal vulnerability that allows an attacker with a valid starting folder path to traverse and read other files...

PT-2023-9858 · Almosteffortless · Almosteffortless Secure-Files Plugin

Name of the Vulnerable Software and Affected Versions: almosteffortless secure-files Plugin versions 1.1 and earlier Description: A critical issue was found in the almosteffortless secure-files Plugin for WordPress. The sf downloads function in the secure-files.php file is affected, where...

PT-2023-7967 · Majordomo · Majordomo

Name of the Vulnerable Software and Affected Versions: MajorDoMo version before 0662e5e Description: The issue is related to the thumb.php module in MajorDoMo, which allows command execution via shell metacharacters. This can be exploited by a remote attacker to execute arbitrary commands. The...

PT-2023-30050 · Cacti +2 · Cacti +2

Name of the Vulnerable Software and Affected Versions: Cacti version 1.2.25 Description: The issue allows a remote attacker to obtain sensitive information via the form actions function in the managers.php file. Recommendations: For Cacti version 1.2.25, consider disabling the form actions functi...

PT-2023-23624 · WordPress · Totalpress.Org Custom Post Types

Name of the Vulnerable Software and Affected Versions: TotalPress.Org Custom post types, Custom Fields & more plugin versions 4.0.12 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges...

PT-2023-28984 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions 4.6.0 through 4.7.6 Description: The issue is related to a Code Injection vulnerability in the mail form of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in the Mail Form...

PT-2023-32334 · Unknown · Codeastro Pos System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS System version 1.0 Description: A critical issue affects some unknown functionality of the file /setting of the component Logo Handler, leading to unrestricted upload. The attack can be launched remotely. Recommendations: For...

PT-2023-30011 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description: A command execution issue was found in the sub 4155DC function, allowing for potential exploitation. Recommendations: For TOTOLINK X6000R version 9.4.0cu.652 B20230116, consider...

PT-2023-8914 · Grafana +1 · Grafana Worldmap Panel Plugin +1

Name of the Vulnerable Software and Affected Versions: Grafana WorldMap panel plugin versions prior to 1.0.4 Description: The issue is related to a DOM XSS vulnerability in the WorldMap panel plugin of the Grafana platform, which is caused by improper neutralization of input during webpage...

PT-2023-29572 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzzCMS version 2.1.9 Description: The issue allows a remote attacker to execute arbitrary code via a crafted file to the down url function in the zzz.php file. This enables the attacker to potentially gain control over the system...

PT-2023-29670 · WordPress · Easy Testimonial Slider/Form

Name of the Vulnerable Software and Affected Versions: Easy Testimonial Slider and Form versions 1.0.18 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

PT-2023-21973 · Zscaler · Zscaler Client Connector For Windows

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector for Windows versions prior to 4.1 Description: The issue allows a malicious user to execute code as a privileged user by replacing a folder where the Zscaler Client Connector for Windows writes or deletes a...

PT-2023-8375 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue is related to the use of hard-coded credentials, such as a password or cryptographic key, in IBM Security Verify Governance. This could allow a remote attacker to disclose...

PT-2023-9141 · Owlet · Owlet Cam

Name of the Vulnerable Software and Affected Versions: Owlet Cam versions v1 and v2 Description: A command injection vulnerability exists in the IOCTL that manages OTA updates, allowing a specially crafted command to lead to command execution as the root user. An attacker can make authenticated...

PT-2023-32270 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic issue has been found in the CodeAstro Internet Banking System, affecting an unknown part of the file pages withdraw money.php. The manipulation of the argument account...

PT-2023-29020 · Unknown · Subrion Cms

Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: Multiple Cross-Site Scripting XSS vulnerabilities in the installation of Subrion CMS allow a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser...