PT-2023-31556

Name of the Vulnerable Software and Affected Versions Biltay Technology Kayisi versions prior to 1286 Description The issue is related to an SQL Injection vulnerability, which allows for the improper neutralization of special elements used in an SQL command. This can lead to SQL Injection and...

PT-2023-26610 · Inspect Element · Echo.Ac

Name of the Vulnerable Software and Affected Versions: Inspect Element Ltd Echo.ac version 5.2.1.0 Description: An issue in Inspect Element Ltd Echo.ac allows a local attacker to gain privileges via a crafted command to the echo driver.sys component. This issue has been reportedly used by various...

PT-2023-6540 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.117 Microsoft Edge versions prior to 118.0.5993.117 Description: The issue is related to a use after free in the Profiles component, which can be exploited by a remote attacker using a crafted HTML...

PT-2023-29233 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions prior to 1.23.3 Description: The issue allows attackers with access to a user's device to gain persistent account access due to missing verification of Session Tokens after password changes and/or elapsed inactivity...

PT-2023-32118 · Xinje · Xdppro

Name of the Vulnerable Software and Affected Versions: XINJE XDPPro versions up to 3.7.17a Description: A critical issue affects some unknown functionality in the library cfgmgr32.dll, leading to an uncontrolled search path. The manipulation can be exploited locally. The issue has been publicly...

PT-2023-29300 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial version 3.1.8 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the admin redirect url parameter of the user login function. This is a Cross Site Scripting XSS issue. Recommendations:...

PT-2023-29182 · Citadel · Citadel

Name of the Vulnerable Software and Affected Versions: Citadel versions prior to 994 Description: A cross-site scripting issue exists. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user. Recommendations: For...

PT-2023-25623 · Pos/ Dienstleistung · Cashit!

Name of the Vulnerable Software and Affected Versions: cashIT! - serving solutions versions from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 Description: The issue is an unauthenticated remote code execution vulnerability that can be triggered by an HTTP endpoint...

PT-2023-22939 · Samsung · Samsung Assistant

Name of the Vulnerable Software and Affected Versions: Samsung Assistant versions prior to 8.7.00.1 Description: The issue is related to improper authorization in the PushMsgReceiver of Samsung Assistant. This allows an attacker to execute a javascript interface. User interaction is required to...

PT-2023-27055 · Unknown · Theme Volty Cms Brandlist +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS BrandList module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS BrandList module for PrestaShop. This allows a guest to perform SQL...

PT-2023-10301 · WordPress · Most Popular Posts Widget Plugin

Name of the Vulnerable Software and Affected Versions: Most Popular Posts Widget Plugin versions up to 0.8 Description: A critical issue has been found in the Most Popular Posts Widget Plugin, affecting the add views/show views function of the functions.php file. This issue leads to sql injection...

PT-2023-5732 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetParentsControlInfo function when handling the Mac parameter. This allows attackers to cause a Denial of Service DoS via crafted input. The...

PT-2023-29030 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a command injection vulnerability in the Changing Username and Password function. This vulnerability can be exploited via a crafted payload. Recommendations: For Netis N3Mv2...

PT-2023-28955 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the name parameter, potentially leading to unauthorized execution of scripts...

PT-2023-30798 · WordPress · Wordpress File Sharing Plugin

Name of the Vulnerable Software and Affected Versions: WordPress File Sharing Plugin versions prior to 2.0.5 Description: The issue allows users to gain access to files and folders by manipulating IDs, which can be easily brute forced, due to a lack of authorization checks. Recommendations: For...

PT-2023-15939 · Caphyon · Caphyon Advanced Installer

Name of the Vulnerable Software and Affected Versions: Caphyon Advanced Installer version 19.7 Description: A critical vulnerability has been found in the WinSxS DLL Handler component of Caphyon Advanced Installer. The manipulation leads to an uncontrolled search path. Attacking locally is a...

PT-2023-28953 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the tax class title parameter. This could potentially lead to unauthorized...

PT-2023-28930 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the admin firstname parameter, potentially leading to unauthorized execution of...

PT-2023-20545 · Tibco Software · Tibco Nimbus

Name of the Vulnerable Software and Affected Versions: TIBCO Nimbus versions 10.6.0 and below Description: The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities. These vulnerabilities allow a low privileged...

PT-2023-31582

Name of the Vulnerable Software and Affected Versions Hospital management system version 378c157 Description The hospital management system is vulnerable to SQL injection SQLI, which allows attackers to bypass authentication. This issue is related to the application's susceptibility to SQLI...