PT-2024-16265 · Sourcecodester · Sourcecodester Attendance/Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Attendance and Payroll System version 1.0 Description: A critical issue has been found in the upload function of the file /marimar/guest/update.php, allowing unrestricted upload through the manipulation of the image argument...

PT-2024-16271 · Codezips · Codezips Pet Shop Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting the /animalsadd.php file. The manipulation of the id argument leads to SQL injection, which can be initiated remotely. The...

PT-2024-16257 · Sourcecodester · Sourcecodester Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Hotel Reservation System version 1.0 Description: A critical issue has been found in the function upload of the file /guest/update.php, where the manipulation of the image argument leads to unrestricted upload. This issu...

PT-2024-16272 · Unknown · Codezips Pet Shop Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting the /deleteanimal.php file, where the manipulation of the t1 argument leads to SQL injection. The attack can be initiated...

PT-2024-16224 · Unknown · Codezips Sales Management System

Name of the Vulnerable Software and Affected Versions: Codezips Sales Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /addcustind.php. The manipulation of the refno argument leads to SQL injection. The attack can be launched remotely...

PT-2024-33197 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry version 6.0.9 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the z parameter. Recommendations: For Sentry version 6.0.9, consider restricting access to the vulnerable parameter z to...

PT-2024-33041 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: funadmin version 5.0.2 Description: The issue is related to SQL Injection via the parentField parameter in the index method of backendcontrollerauthAuth.php. There is no information provided about the estimated number of potentially affected...

PT-2024-31765 · Musasi · Musasi

Name of the Vulnerable Software and Affected Versions: MUSASI version 3 Description: The issue is related to the use of client-side authentication. If exploited, it may allow retrieval of other users' credentials and sensitive information. Recommendations: For MUSASI version 3, consider disabling...

PT-2024-16228 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been found, affecting the actionPassOrNotAutoSign function in the /com/esafenet/servlet/service/processsign/AutoSignService.java file. The manipulation of the UniqueId argument leads to...

PT-2024-16197 · Unknown · Sourcecodehero Clothes Recommendation System

Name of the Vulnerable Software and Affected Versions: SourceCodeHero Clothes Recommendation System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the cat, subcat, t1, t2, and text arguments in the /admin/home.php?con=add...

PT-2024-33482 · Zimaos · Zimaos

Name of the Vulnerable Software and Affected Versions: ZimaOS versions 1.2.4 and earlier Description: The issue allows authenticated users to perform a directory traversal attack via the API endpoint http:///v2 1/file, enabling access to sensitive system directories such as /etc. This could expos...

PT-2024-32998

Name of the Vulnerable Software and Affected Versions Blackbox AI version 1.3.95 Description A prompt injection issue in the chatbox allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message. Recommendations For...

PT-2024-32830 · Umbraco · Umbraco

Name of the Vulnerable Software and Affected Versions: Umbraco versions 14.0.0 through 14.3.0 Umbraco versions prior to 15.0.0 Description: The issue allows for cross-site scripting, which can be leveraged to gain access to higher-privilege endpoints. If a user with admin privileges runs the code...

PT-2024-34133

Name of the Vulnerable Software and Affected Versions: GraphQL affected versions not specified Description: A vulnerability was found in GraphQL due to improper access controls on the graphql introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available...

PT-2024-33896

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to the io uring feature in the Linux kernel, where an overflow can cause a significant delay during flushing. Normally, this list is empty, but an application can overflo...

PT-2024-28777 · Vilo · Vilo 5 Mesh Wifi System

Name of the Vulnerable Software and Affected Versions: Vilo 5 Mesh WiFi System versions up to 5.16.1.33 Description: A Command Injection issue allows remote, authenticated attackers to execute arbitrary code by injecting shell commands into the name of the Vilo device. This enables attackers to r...

PT-2024-33466 · Unknown · Photo Gallery Builder

Name of the Vulnerable Software and Affected Versions: Photo Gallery Builder versions 3.0 and earlier Description: The issue is related to a broken access control for subscribers in Photo Gallery Builder. This allows unauthorized access, potentially leading to data breaches or other security...

PT-2024-33582 · WordPress · Noor Alam Wordpress Image Seo

Name of the Vulnerable Software and Affected Versions: Noor Alam WordPress Image SEO versions 1.1.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Noor Alam WordPress Image SEO, allowing attackers to perform unauthorized actions. This can be exploited by misusing...

PT-2024-33578 · WordPress · Duplicate Title Validate

Name of the Vulnerable Software and Affected Versions: Duplicate Title Validate versions n/a through 1.0 Description: The issue is related to an SQL Injection vulnerability, specifically an improper neutralization of special elements used in an SQL command. This allows for Blind SQL Injection,...

PT-2024-33580 · Brandon Clark · Brandon Clark Sitebuilder Dynamic Components

Name of the Vulnerable Software and Affected Versions: Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components. Recommendations: For...