PT-2024-39550 · Sourcecodester · Sourcecodester Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Advocate Office Management System version 1.0 Description: A critical issue affects the processing of the file /control/login.php, where the manipulation of the username argument leads to sql injection. The attack can be...

PT-2024-31819 · Facebook · Facebook Thrift

Name of the Vulnerable Software and Affected Versions: Facebook Thrift versions v2024.09.09.00 through v2024.09.23.00 Description: A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable...

PT-2024-9360 · Sap +1 · Sap Netweaver As Java +1

Name of the Vulnerable Software and Affected Versions: Adobe Document Service affected versions not specified SAP NetWeaver AS for Java affected versions not specified Description: The issue is related to a Server-Side Request Forgery vulnerability in Adobe Document Service, which can be exploite...

PT-2024-39538 · Unknown · Kalvingit Kvf-Admin

Name of the Vulnerable Software and Affected Versions: kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff Description: A critical issue has been found in the fileUpload function of the FileUploadKit.java file, allowing for unrestricted upload by manipulating the file argument. Thi...

PT-2024-39533 · Jeanmarc77 · 123Solar

Name of the Vulnerable Software and Affected Versions: jeanmarc77 123solar versions up to 1.8.4.5 Description: A critical issue affects the processing of the file /admin/admin invt2.php. The manipulation of the argument PROTOCOLx leads to file inclusion. This issue can be exploited remotely...

PT-2024-39149

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue affects Oceanic Software ValeApp, allowing protocol manipulation through JSON Hijacking, also known as JavaScript Hijacking, due to cleartext storage of sensitive information in a cookie...

PT-2024-31961 · Vonets · Vonets Vap11G-300

Name of the Vulnerable Software and Affected Versions: VONETS VAP11G-300 version 3.3.23.6.9 Description: A command injection issue was discovered in VONETS VAP11G-300 via the iptablesWebsFilterRun object. This allows for potential command injection attacks. Recommendations: For VONETS VAP11G-300...

PT-2024-32416 · Gotenna · Gotenna Pro App +2

Name of the Vulnerable Software and Affected Versions: goTenna Pro App versions affected versions not specified goTenna Pro X goTenna Pro X2 Description: The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is capture...

PT-2024-31868 · Scheduler · Scheduler

Name of the Vulnerable Software and Affected Versions: scheduleR version 0.0.18 Description: A host header injection vulnerability allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This enables attackers to arbitrarily reset other users'...

PT-2024-27321 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software, versions 10.5.3.x through 10.5.6.x Description: The issue is related to an Uncontrolled Resource Consumption vulnerability. A remote unauthenticated host could potentially exploit this vulnerability, leading to...

PT-2024-32082 · Unknown · Becn Datagerry

Name of the Vulnerable Software and Affected Versions: BECN DATAGERRY version 2.2 Description: The issue allows attackers to execute arbitrary commands via crafted web requests due to incorrect access control. Recommendations: For BECN DATAGERRY version 2.2, consider restricting access to the web...

PT-2024-38454 · Unknown +1 · Contact Form 7 +1

Name of the Vulnerable Software and Affected Versions: Contact Form to Any API plugin for WordPress versions 1.2.2 and earlier Description: The issue is related to Stored Cross-Site Scripting via Contact Form 7 form fields due to insufficient input sanitization and output escaping. This allows...

PT-2024-39011 · Themehunk · Easy Mega Menu Plugin

Name of the Vulnerable Software and Affected Versions: Easy Mega Menu Plugin for WordPress – ThemeHunk plugin versions up to, and including, 1.0.9 Description: The issue arises from a missing capability check on several functions hooked via AJAX, allowing authenticated attackers with...

PT-2024-38932 · Opw Fuel Management Systems · Sitesentinel

Name of the Vulnerable Software and Affected Versions: OPW Fuel Management Systems SiteSentinel versions prior to 17Q2.1 Description: The issue allows an attacker to bypass authentication to the server and obtain full admin privileges. This could enable remote attacks. Recommendations: For OPW Fu...

PT-2024-39318 · WordPress · Anwp Football Leagues

Name of the Vulnerable Software and Affected Versions: AnWP Football Leagues plugin for WordPress versions up to, and including, 0.16.7 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows...

PT-2024-39418 · Unknown · Blood Bank System

Name of the Vulnerable Software and Affected Versions: Blood Bank System version 1.0 Description: A problematic issue was found in the Blood Bank System, affecting unknown parts of the bbms.php file. The manipulation of the fullname, age, bloodgroup, city, phno, and gender arguments as part of a...

PT-2024-39417

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0 Description A problematic vulnerability has been found in the SourceCodester Employee Management System. This issue affects an unknown part of the file /Admin/add-admin.php. The manipulatio...

PT-2024-29872

Name of the Vulnerable Software and Affected Versions Apache HertzBeat incubating versions prior to 1.6.0 Description The software is susceptible to a remote code execution issue stemming from a malicious XML deserialization flaw within the SnakeYaml component. This issue can only be exploited by...

PT-2024-31910 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: The issue is related to an SQL Injection vulnerability. This vulnerability exists through the SEMCMS Main.php file. Recommendations: For SEMCMS version 4.8, as a temporary workaround, consider restricting acces...

PT-2024-32094 · Enms · Enms

Name of the Vulnerable Software and Affected Versions: eNMS versions up to 4.7.1 Description: The issue is a Directory Traversal vulnerability, which occurs via the download/folder path. Recommendations: For versions up to 4.7.1, consider restricting access to the download/folder path as a...