PT-2023-29834 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Wpmet Wp Ultimate Review plugin versions 2.2.4 and earlier ICS versions 9.x and 22.x IPS affected versions not specified Ivanti Connect Secure and Policy Secure gateways affected versions not specified Description: The issue concerns an...

CVE-2023-5494

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this issue is some unknown functionality of the file /log/download.php. The manipulation of the argument file leads to os command...

CVE-2023-5494

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (versions up to 20230928) contains an OS command injection vulnerability in the /log/download.php endpoint. The issue arises from manipulating the file argument, allowing remote exploitation. Public disclosures exist (...

CVE-2023-5494 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injection

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this issue is some unknown functionality of the file /log/download.php. The manipulation of the argument file leads to os command...

CVE-2023-5493

The vulnerability CVE-2023-5493 affects Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The issue concerns the file /useratte/web.php where manipulation of the file_upload argument enables unrestricted file upload, potentially allowing remote, unau...

CVE-2023-5493 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload

A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument fileupload leads t...

CVE-2023-5492 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted...

CVE-2023-5492

CVE-2023-5492 affects Byzoro/Beijing Baichuo S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The flaw is in /sysmanage/licence.php: manipulation of file_upload enables unrestricted file upload, enabling remote attack. Documentation consistently states an arbitr...

CVE-2023-5489

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

CVE-2023-5491 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This issue affects some unknown processing of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to...

CVE-2023-5491

CVE-2023-5491 affects Byzoro Smart S45F and Beijing Baichuo Smart S45F Multi-Service Secure Gateway platforms up to 20230928. A vulnerability in /sysmanage/updatelib.php, specifically the file_upload argument, allows unrestricted upload. The issue can be triggered remotely and an exploit has been...

CVE-2023-5490

CVE-2023-5490 affects the Beijing Baichuo/Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The vulnerability resides in the /useratte/userattestation.php file, where manipulating the web_img argument enables unrestricted file upload, with remote exp...

CVE-2023-5489 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

CVE-2023-5489

CVE-2023-5489 affects the Beijing Baichuo/Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. A code/file-upload issue exists in /Tool/uploadfile.php where manipulating the file_upload argument allows unrestricted file upload, enabling remote initiation....

CVE-2023-5488 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads t...

CVE-2023-5488

The CVE-2023-5488 entry concerns Byzoro/Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. The vulnerability resides in the file /sysmanage/updatelib.php and is triggered by manipulating the file_upload argument, leading to unrestricted file up...

PT-2023-32131

Name of the Vulnerable Software and Affected Versions Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description A critical issue...

CVE-2023-5492: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted...

CVE-2023-5491: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This issue affects some unknown processing of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to...

CVE-2023-5493: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument fileupload leads t...