PT-2023-4646 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.10 Description: The issue is related to the client-side enforcement of server-side security in Zoom clients, which may allow an authenticated user to enable information disclosure via network access. This could...

PT-2023-25620 · Pestudio · Pestudio

Name of the Vulnerable Software and Affected Versions: PEStudio version 9.52 Description: An issue in PEStudio allows a remote attacker to execute arbitrary code via a crafted DLL file to the PEStudio executable. Recommendations: For PEStudio version 9.52, consider disabling the execution of...

PT-2023-25815

Name of the Vulnerable Software and Affected Versions Farmakom Remote Administration Console versions prior to 1.02 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-28209 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Inventory Management System, affecting the file product data.php. The manipulation of the columns1data argument leads to...

PT-2023-26524 · NetGear · Netgear Dg834Gv5

Name of the Vulnerable Software and Affected Versions: Netgear DG834Gv5 version 1.6.01.34 Description: The issue concerns multiple buffer overflows that can be triggered via the wla ssid and wla temp ssid parameters at the "bsw ssid.cgi" endpoint. Recommendations: For Netgear DG834Gv5 version...

PT-2023-4946 · Qemu +9 · Qemu +9

Name of the Vulnerable Software and Affected Versions: QEMU versions through 8.0.0 Description: The issue is related to a division by zero in the scsi disk reset function in hw/scsi/scsi-disk.c due to incorrect block size checking by scsi disk emulate mode select. This can cause QEMU and the gues...

PT-2023-28113 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the SourceCodester Inventory Management System, affecting the file edit sell.php. The manipulation of the up pid argument leads to SQL injection...

PT-2023-28040 · Emby · Media Browser Emby Server

Name of the Vulnerable Software and Affected Versions: Media Browser Emby Server version 4.7.13.0 Description: A vulnerability was found in the processing of the file /web/, which leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and...

ALPINE-CVE-2023-38497

Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local...

PT-2023-26701 · Wbce Cms · Wbce Cms

Name of the Vulnerable Software and Affected Versions: WBCE CMS version 1.6.1 Description: An arbitrary file upload issue in the /languages/install.php component allows attackers to execute arbitrary code via a crafted PHP file. The "languages/install.php" component is specifically vulnerable,...

PT-2023-23314 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS versions prior to 8.2.3d Brocade Fabric OS versions prior to 9.2.0 Description: The issue concerns the Brocade Fabric OS Commands "configupload" and "configdownload" which print scp...

PT-2023-24390 · Phpjabbers · Php Jabbers Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHPJabbers Time Slots Booking Calendar version 3.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability is found in the theme parameter of the "preview.php" file. Recommendations: For PHPJabbers Ti...

PT-2023-4159 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: An issue was discovered in the download functionality, allowing an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a crafted download path containing a malicious payload, an attacke...

PT-2023-4160 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: A Cross-site Scripting XSS Bypass vulnerability was discovered in the file upload functionality of Webmin. Normally, the application restricts the upload of certain file types such as .svg, .php, etc., and...

PT-2023-26058 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.5 Description: The issue is a SQL injection vulnerability. It can be exploited via the id parameter at the "/Ant Suxin.php" API endpoint. Recommendations: For SEMCMS version 1.5, as a temporary workaround, consider restrictin...

PT-2023-24470 · Teleadapt · Teleadapt Roomcast Ta-2400

Name of the Vulnerable Software and Affected Versions: TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 Description: The issue concerns Improper Privilege Management. After establishing an adb connection, accessing the shell and entering the su command provides root access without requiring a...

PT-2023-26229 · WordPress · Wpkube Authors List

Name of the Vulnerable Software and Affected Versions: WPKube Authors List plugin versions = 2.0.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentiall...

PT-2023-13039 · Trudesk · Trudesk

Name of the Vulnerable Software and Affected Versions: Truedesk version 1.2.2 Description: A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name parameter. Recommendations: For Truedesk version 1.2.2, avoid using t...

PT-2023-20829 · Prestashop · Prestashop Sendinblue

Name of the Vulnerable Software and Affected Versions: PrestaShop sendinblue versions 4.0.15 and earlier Description: A SQL injection issue allows a remote attacker to gain privileges via the ajaxOrderTracking.php component. Recommendations: For PrestaShop sendinblue versions 4.0.15 and earlier,...

PT-2023-26581 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 0.1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/del feedback.php. The manipulation of the id argument leads to sql...