UBUNTU-CVE-2023-24291

A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...

CVE-2023-24288

A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...

PT-2023-19517 · Unknown · Simon Tatham'S Portable Puzzle Collection

Name of the Vulnerable Software and Affected Versions: Simon Tatham's Portable Puzzle Collection affected versions not specified Description: A crafted save file can cause a buffer overrun in the software. This issue can potentially be exploited, but no specific details about the estimated number...

UBUNTU-CVE-2023-24283

A crafted save file can cause a buffer overrun in the Guess puzzle...

UBUNTU-CVE-2023-24287

A crafted save file can cause a buffer overrun in the Undead puzzle...

UBUNTU-CVE-2023-24288

A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...

UBUNTU-CVE-2023-24285

A crafted save file can cause a buffer overrun in the Netslide puzzle...

PT-2023-19513 · Canonical +4 · Sgt-Puzzles

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A crafted save file can cause a buffer overrun in the Mosaic puzzle. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-24283

A crafted save file can cause a buffer overrun in the Guess puzzle...

UBUNTU-CVE-2023-24284

A crafted save file can cause a buffer overrun in the Guess puzzle...

PT-2023-18512 · Sourcecodester · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found in the SourceCodester Online Pizza Ordering System, affecting the file admin/ajax.php?action=save settings. The manipulation of the img...

Online Pizza Ordering System 代码问题漏洞

Online Pizza Ordering System is an online pizza ordering system. An arbitrary file upload vulnerability exists in Online Pizza Ordering System v1.0, which stems from the parameter img of admin/ajax.php?action=savesettings that lacks validation of the uploaded file. The vulnerability can be...

GHSA-C23V-VQW5-52C5 PowerJob vulnerable to Incorrect Access Control via the create user/save interface.

PowerJob v4.9.3 is vulnerable to Incorrect Access Control via the create user/save interface...

Improper access control

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface...

CVE-2023-29922

PowerJob V4.3.1 is affected by an Incorrect Access Control vulnerability in the create user/save interface. The root cause is insufficient authorization checks on the /user/save flow, potentially allowing an attacker to bypass authentication and perform unauthorized user creation. Documented deta...

BizLibrary <= 1.1 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Login as Admin. 2. Go to...

CVE-2023-2155

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file classes/Master.php?f=savecargotype. The manipulation of the argument name leads to cross site scripting. The attack can be initiate...

SUSE CVE-2022-47522

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

PT-2023-18283 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Air Cargo Management System version 1.0 Description: A vulnerability was found in the SourceCodester Air Cargo Management System, affecting unknown code of the file classes/Master.php?f=save cargo type. The manipulation of the...

Air Cargo Management System 跨站脚本漏洞

Air Cargo Management System is an air cargo management system. A cross-site scripting vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which stems from a problem with the file classes/Master.php?f=savecargotype, where manipulation of the parameter name can lead to...