PT-2023-1297 · Tp Link · Tp-Link Sg105Pe

Name of the Vulnerable Software and Affected Versions: TP-Link SG105PE versions prior to 1.0 1.0.0 Build 20221208 Description: The issue is related to an authentication bypass vulnerability in the firmware of TP-Link SG105PE switches. This vulnerability is associated with weaknesses in the...

PT-2023-10218 · Unknown · Dobos Domino

Name of the Vulnerable Software and Affected Versions: dobos domino versions prior to 0.1.5524.38553 Description: A critical issue was found in dobos domino, affecting some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection...

PT-2023-1110 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2023-1069 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

PT-2023-14965 · 72Crm · 72Crm

Name of the Vulnerable Software and Affected Versions: 72crm version 9 Description: The issue is related to an arbitrary file upload vulnerability via the avatar upload function, allowing attackers to execute arbitrary code by uploading a crafted PHP file. Recommendations: For 72crm version 9,...

PT-2023-15486 · Sourcecodester · Sourcecodester Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Dynamic Transaction Queuing System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /queuing/index.php?page=display&id= endpoint. The id parameter is vulnerable to SQL injection attacks...

PT-2023-18530 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions prior to 1.6.4 Description: The issue allows unauthorized access to system API interfaces, potentially leaking sensitive information. This is due to a flaw in how online applications handle routing permissions. There are no...

PT-2023-18531 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions 1.6.3 and below Description: A session fixation attack allows an attacker to hijack a legitimate user session. This issue is related to a flaw in how the online application handles the session ID, particularly in susceptible w...

PT-2023-12414 · Unknown · 01-Scripts 01-Artikelsystem

Name of the Vulnerable Software and Affected Versions: 01-Scripts 01-Artikelsystem affected versions not specified Description: A problematic issue has been found, affecting an unknown function of the file 01article.php. The manipulation of the argument $ SERVER'PHP SELF' leads to cross-site...

PT-2023-12829 · Wifey · Wifey

Name of the Vulnerable Software and Affected Versions: wifey affected versions not specified Description: The issue is related to Command Injection via the connect function due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated...

PT-2023-18532 · Unknown · Kubeoperator

Name of the Vulnerable Software and Affected Versions: KubeOperator versions 3.16.3 and below Description: The issue allows unauthorized access to API interfaces, potentially leaking sensitive information and allowing takeover of the cluster under certain conditions. This is due to a flaw in...

PT-2023-9888 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: simpleSAMLphp versions prior to 1.0 Description: A vulnerability was found in the Information Cards Module and classified as problematic. This issue affects some unknown processing, leading to cross-site scripting. The attack may be initiated...

PT-2023-10332 · Forumhulp · Forumhulp

Name of the Vulnerable Software and Affected Versions: ForumHulp affected versions not specified Description: A critical issue was found in ForumHulp searchresults, affecting the list keywords function of the file event/listener.php. The manipulation of the word argument leads to SQL injection...

PT-2023-16019 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing an attack...

PT-2023-10208 · Kelvinmo · Simplexrd

Name of the Vulnerable Software and Affected Versions: kelvinmo simplexrd versions up to 3.1.0 Description: A vulnerability was found in the file simplexrd/simplexrd.class.php, which leads to xml external entity reference. This issue affects unknown code and can be addressed by upgrading to versi...

PT-2023-10207 · Unknown · Ss15-This-Is-Sparta

Name of the Vulnerable Software and Affected Versions: ss15-this-is-sparta affected versions not specified Description: A vulnerability has been found in the component Main Page, specifically affecting the file js/roomElement.js. The manipulation leads to cross site scripting. The attack can be...

PT-2023-10807 · Petermu · Nodebatis

Name of the Vulnerable Software and Affected Versions: PeterMu nodebatis versions up to 2.1.x Description: A critical issue has been found, affecting an unknown function, which leads to sql injection. Upgrading to version 2.2.0 can address this issue. Recommendations: For versions up to 2.1.x,...

PT-2023-10123 · Piwigo · Piwigo-Guest-Book

Name of the Vulnerable Software and Affected Versions: Piwigo-Guest-Book versions up to 1.3.0 Description: A critical issue affects the Navigation Bar component, specifically the include/guestbook.inc.php file. The manipulation of the start argument leads to sql injection. Recommendations: For...

Prototype Pollution

json5 is vulnerable to prototype pollution. The vulnerability exists in the internalize function in parse.js due to not restricting keys named proto which allows an attacker to inject specially crafted strings to pollute the prototype of the resulting object...

PT-2023-18509 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.14 on the stable branch Discourse versions prior to 3.0.0.beta16 on the beta and tests-passed branches Description: The issue exposes the number of times a user posted in an arbitrary topic to unauthorized user...