PT-2024-20685 · Tvrock · Tvrock

Name of the Vulnerable Software and Affected Versions: TvRock version 0.9t8a Description: A denial-of-service DoS issue exists, where receiving a specially crafted request by a remote attacker or having a user click a specially crafted request may lead to an abnormal end ABEND. The developer of...

PT-2024-10854 · Minerbabe · Minerbabe

Name of the Vulnerable Software and Affected Versions: Minerbabe versions through V4.16 Description: The issue allows man-in-the-middle attacks due to SSH host keys being baked into the installation image. This makes it trivial to identify all public IPv4 nodes using Shodan.io. Recommendations: F...

PT-2024-10725 · Easymine · Easymine

Name of the Vulnerable Software and Affected Versions: easyMINE versions prior to 2019-12-05 Description: The issue allows man-in-the-middle attacks due to SSH host keys being baked into the installation image. This makes it trivial to identify all public IPv4 nodes using Shodan.io...

PT-2024-7191

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.8 Description The issue is related to a negative array index read in the Linux kernel, specifically in the drm/amd/pm module. The problem arises from using negative values for clk idex as an index into an...

PT-2024-4456 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to insufficient protection of the web page structure, which can be exploited by a remote attacker to execute arbitrary code. A stored Cross-Site Scripting...

PT-2024-25305 · Wpzoom · Wpzoom Addons For Elementor

Name of the Vulnerable Software and Affected Versions: WPZOOM Addons for Elementor versions 1.1.35 and earlier Description: The issue affects WPZOOM Addons for Elementor, allowing Stored XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting...

PT-2024-25437 · WordPress · Regenerate Post Permalink

Name of the Vulnerable Software and Affected Versions: Regenerate post permalink versions n/a through 1.0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in the Regenerate post permalink plugin. Recommendations: For versions n/a...

PT-2024-25175 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: A segmentation violation was discovered in Jerryscript via the parser parse class component at jerry-core/parser/js/js-parser-expr.c. Recommendations: For Jerryscript version cefd391, consider...

PT-2024-12937

Name of the Vulnerable Software and Affected Versions QuFirewall versions prior to 2.4.1 Description A path traversal issue has been reported, allowing authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. Recommendations For versions prior...

PT-2024-29942

Name of the Vulnerable Software and Affected Versions Tenda W9 version 1.0.0.74456 Description A critical vulnerability has been found in the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to a stack-based buffer overflow. It is possible ...

PT-2024-19510 · Setor Informatica · Setor Informatica Sistema Inteligente Para Laboratorios

Name of the Vulnerable Software and Affected Versions: Setor Informatica Sistema Inteligente para Laboratorios S.I.L. version 388 Description: The issue is related to a remote code execution RCE vulnerability. It can be triggered via a crafted POST request to the hprinter parameter...

PT-2024-12936

Name of the Vulnerable Software and Affected Versions QuFirewall versions prior to 2.4.1 Description A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose...

PT-2024-5142 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.0 Description: The issue is related to the transmission of syslog traffic in clear text, which could allow an unauthenticated, remote attacker to capture sensitive information. This could potentially lead ...

PT-2024-29489 · Tenda · Tenda 4G300

Name of the Vulnerable Software and Affected Versions: Tenda 4G300 version 1.01.42 Description: A critical issue has been found, affecting the function sub 41E858. The manipulation of the argument GO/page leads to a stack-based buffer overflow. This issue can be exploited remotely. The vendor was...

PT-2024-29521 · Tenda · Tenda 4G300

Name of the Vulnerable Software and Affected Versions: Tenda 4G300 version 1.01.42 Description: A critical issue affects the function sub 429A30. The manipulation of the argument list1 leads to a stack-based buffer overflow. The attack may be initiated remotely. The vendor was contacted about thi...

PT-2024-24857 · Elementor · The Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Pack Elementor addons versions 2.0.8.3 and earlier Description: A Cross-Site Request Forgery CSRF issue in The Pack Elementor addons allows for Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performin...

PT-2024-24156 · Unknown · Rg-Rsr10-01G-T(Wa)-S

Name of the Vulnerable Software and Affected Versions: RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers version RSR10-01G-T-S RSR 3.01B9P2, Release07150910 Description: An issue in the routers allows attackers to execute arbitrary code via the common quick config.lua file. Recommendations: For...

PT-2024-17582 · Unknown · Watchdog Anti-Virus +1

Name of the Vulnerable Software and Affected Versions: Watchdog Antivirus version 1.6.415 Description: The issue is related to a Denial of Service vulnerability that can be triggered by exploiting the 0x80002014 IOCTL code of the wsdk-driver.sys driver. Recommendations: For Watchdog Antivirus...

PT-2024-7005

Name of the Vulnerable Software and Affected Versions Grafana versions prior to v11.0.6+security-01 Grafana versions prior to v11.1.7+security-01 Grafana versions prior to v11.2.2+security-01 Description The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queri...

PT-2024-28998 · Unknown · Kashipara Online Furniture Shopping Ecommerce Website

Name of the Vulnerable Software and Affected Versions: Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description: A vulnerability was found in the file search.php, where the manipulation of the txtSearch argument leads to cross site scripting. It is possible to launch the atta...