PT-2023-25711 · Unknown · Nesote Inout Blockchain Easypayments

Name of the Vulnerable Software and Affected Versions: Nesote Inout Blockchain EasyPayments version 1.0 Description: A critical issue was found in the POST Parameter Handler component of the /index.php/payment/getcoinaddress file. The manipulation of the coinid argument leads to sql injection,...

PT-2023-12146 · Redis +2 · Redis +2

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 6.2 Redis versions prior to 6cbea7d Description: The issue allows a replica to cause an assertion failure in a primary server by sending a non-administrative command, specifically a SET command. This was fixed for Redi...

PT-2023-26346 · Thymeleaf +1 · Thymeleaf +1

Name of the Vulnerable Software and Affected Versions: Thymeleaf versions 3.1.1.RELEASE and earlier spring-boot-admin versions 3.1.1 and earlier Description: The issue allows for a sandbox bypass via crafted HTML, which may be relevant for Server Side Template Injection SSTI and code execution in...

PT-2023-25980 · Unknown · Feedbacksystem

Name of the Vulnerable Software and Affected Versions: Feedbacksystem versions prior to 1.19.2 Description: The issue concerns the storage of passwords in clear text for users utilizing LDAP login. Specifically, the LDAP user's password is passed unencrypted in the LoginController.scala and store...

PT-2023-24207

Name of the Vulnerable Software and Affected Versions iDisplay PlatPlay DS versions prior to 3.14 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2023-25627 · Unknown · Campcodes Retro Cellphone Online Store

Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting some unknown functionality of the file /admin/add user modal.php. The manipulation of the un...

PT-2023-25900 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2023-8862 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.9 Description: The issue is related to SQL injection via dashboards administration, allowing a remote attacker to execute arbitrary SQL queries. This can be triggered by an administrator. Recommendations: For...

PT-2023-3665 · Rockwell Automation · 1756-En2T +8

Name of the Vulnerable Software and Affected Versions: Rockwell Automation 1756-EN4 Ethernet/IP communication products Rockwell Automation 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR,...

PT-2023-25572

Name of the Vulnerable Software and Affected Versions Boss Mini version 1.4.0 Build 6221 Description A critical issue affects an unknown part of the file boss/servlet/document, where the manipulation of the path argument leads to file inclusion. This can be initiated remotely. Recommendations For...

PT-2023-4084 · Siemens · Simatic Cn 4100

Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: A vulnerability has been identified in the SIMATIC CN 4100, related to an incorrect default value in the SSH configuration. This issue could allow an attacker to bypass network isolation. Th...

PT-2023-5817 · Unknown · Sipass Integrated

Name of the Vulnerable Software and Affected Versions: SiPass integrated versions prior to V2.90.3.8 Description: A vulnerability has been identified in SiPass integrated, where affected server applications improperly check the size of data packets received for the configuration client login,...

PT-2023-25418 · Tamronos · Tamronos

Name of the Vulnerable Software and Affected Versions: TamronOS versions up to 20230703 Description: A critical issue has been found, affecting an unknown part of the file "/api/ping". The manipulation of the host argument leads to os command injection, allowing remote attacks. The issue has been...

PT-2023-22355 · WordPress · Tinymce Custom Styles

Name of the Vulnerable Software and Affected Versions: TinyMCE Custom Styles WordPress plugin versions prior to 1.1.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...

PT-2023-10298 · WordPress · Wds Multisite Aggregate Plugin

Name of the Vulnerable Software and Affected Versions: WDS Multisite Aggregate Plugin versions up to 1.0.0 Description: A problematic issue was found in the WDS Multisite Aggregate Plugin, affecting the update options function of the file includes/WDS Multisite Aggregate Options.php. This issue...

PT-2023-4277 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 2.1.2 Description: The issue is related to a lack of authentication and authorization in the eventon ics download ajax action of the EventON WordPress plugin. This allows unauthenticated visitors to...

PT-2023-25421 · Ruijie · Ruijie Bcr810W

Name of the Vulnerable Software and Affected Versions: Ruijie BCR810W version 2.5.10 Description: A critical issue affects the Tracert Page component, leading to os command injection. The manipulation can be initiated remotely. The exploit has been disclosed to the public. The vendor was contacte...

PT-2023-25419 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox version 1.26 Description: A critical issue affects the function Execute of the file webconsole.php.txt in the WebConsole Plug-In component, leading to os command injection. The exploit has been disclosed publicly and may be used. The...

PT-2023-25228 · Unknown · Gz Scripts Event Booking Calendar

Name of the Vulnerable Software and Affected Versions: GZ Scripts Event Booking Calendar version 1.8 Description: A problematic issue has been discovered, affecting an unknown function of the file /load.php. The manipulation of the arguments first name, second name, phone, address 1, or country...

PT-2023-25214 · Thinutech · Thinucms

Name of the Vulnerable Software and Affected Versions: ThinuTech ThinuCMS version 1.5 Description: A vulnerability has been found in an unknown functionality of the file /author posts.php. The manipulation of the argument author with the input g6g12alert1o8sdm leads to cross site scripting. The...