PT-2023-26179 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue was found in the function actionExport of the component Personal Office Address Book, specifically in the file "?r=contact/default/export". This issue leads to SQL injection and can be...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 3

Package name: xms10.15.0.10327.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: July 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this...

PT-2023-13492 · Nikola Loncar · Easyappointments

Name of the Vulnerable Software and Affected Versions: Nikola Loncar Easy Appointments plugin versions prior to 3.11.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-12518 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An issue allows an administrator to execute commands as root via the alerts management dialog. Recommendations: At the moment, there is no information about a newer version that contain...

Microsoft Windows Installed Software Version Enumeration

This plugin enumerates the installed software version by interrogating information obtained from various registry entries and files on disk. This plugin provides a best guess at the software version and a confidence level for that version. Note that the versions detected here do not necessarily...

PT-2023-21773 · Softmed · Softmed Selfpatron

Name of the Vulnerable Software and Affected Versions: Softmed SelfPatron versions prior to 2.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: Fo...

Ovarro TBox RTU 安全漏洞

Ovarro TBox RTUs is a modular remote monitoring and automation solution from Ovarro Germany. A security vulnerability exists in the Ovarro TBox RTUs that stems from a lack of authorization to run certain API commands, which could be exploited by an attacker to disclose sensitive information, such...

PT-2023-14536 · Unknown · Weblib Ucopia

Name of the Vulnerable Software and Affected Versions: Weblib Ucopia versions prior to 6.0.13 Description: An issue was discovered in the SSH Server of Weblib Ucopia, where it has insecure permissions. Recommendations: For versions prior to 6.0.13, update to version 6.0.13 or later to resolve the...

Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated) Exploit

Exploit Title: Smart Office Web 20.28 - Remote Information Disclosure Unauthenticated Shodan Dork:: inurl:"https://www.shodan.io/search?query=smart+office" Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://smartofficepayroll.com/ Software Link:...

SUSE-SU-2023:2572-1 Security update for salt

This update for salt fixes the following issues: - Update to Salt release version 3006.0 jscPED-4361 See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency...

CVE-2023-23954

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...

Inpiazza Cloud WiFi 安全漏洞

Inpiazza Cloud WiFi is an innovative artificial intelligence platform from Inpiazza, Inc. that allows digital interactions via WiFi interactions. A security vulnerability exists in Inpiazza Cloud WiFi versions prior to v4.2.17 that stems from the portal not enforcing a limit on the number of...

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-33509

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

PT-2023-20298 · WordPress · Sebastian Krysmanski Upload File Type Settings

Name of the Vulnerable Software and Affected Versions: Sebastian Krysmanski Upload File Type Settings plugin versions = 1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For...

CVE-2023-30469 Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00...

Hubstaff 1.6.14-61e5e22e - (wow64log) DLL Search Order Hijacking Vulnerability

Exploit Title: Hubstaff 1.6.14-61e5e22e - 'wow64log' DLL Search Order Hijacking Exploit Author: Ahsan Azad Vendor Homepage: https://hubstaff.com/ Software Link: https://app.hubstaff.com/download Version: 1.6.13, 1.6.14 Tested On: 64-bit operating system, x64-based processor Description Hubstaff i...

CVE-2023-2837

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

PT-2023-3988 · Unknown · Sumatrapdf

Name of the Vulnerable Software and Affected Versions: SumatraPDF version 3.4.6 Description: The issue is related to a buffer overflow in the SumatraPDF Reader when handling text files, such as first.txt and second.txt, due to the lack of size checking of input data. This can be exploited by a...

CVE-2023-29284

Adobe Substance 3D Painter versions 8.3.0 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...