PT-2023-27235 · Ipswitch · Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: WS FTP Server versions prior to 8.8.2 Description: An unauthenticated user could enumerate files under the 'WebServiceHost' directory listing. Recommendations: For WS FTP Server versions prior to 8.8.2, update to version 8.8.2 or later to...

PT-2023-27859 · WordPress · Happy Addons For Elementor Pro

Name of the Vulnerable Software and Affected Versions: Happy Elementor Addons Pro plugin versions = 2.8.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-29465 · Real Time Automation · Real Time Automation 460 Series

Name of the Vulnerable Software and Affected Versions: Real Time Automation 460 Series products versions prior to 8.9.8 Description: The issue allows an attacker to run any JavaScript reference from the URL string, which could lead to a cross-site scripting attack. If this occurs, the gateway's...

PT-2023-22712 · Mythemeshop · Mythemeshop Url Shortener

Name of the Vulnerable Software and Affected Versions: MyThemeShop URL Shortener plugin versions 1.0.17 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentiall...

PT-2023-27860 · Everest Themes · Arya Multipurpose Pro

Name of the Vulnerable Software and Affected Versions: Everest Themes Arya Multipurpose Pro theme versions 1.0.8 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts...

PT-2023-19324 · Symantec · Symantec Protection Engine

Name of the Vulnerable Software and Affected Versions: Symantec Protection Engine versions prior to 9.1.0 Description: The issue may allow sensitive information to be exposed to an unauthorized actor due to a Hash Leak. Recommendations: For Symantec Protection Engine versions prior to 9.1.0, upda...

PT-2023-27431 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS versions prior to Sonoma 14 Description: The issue was addressed with improved memory handling. An app may be able to disclose...

PT-2023-27588 · Pdfcrowd · Pdfcrowd Save As Pdf Plugin

Name of the Vulnerable Software and Affected Versions: Pdfcrowd Save as PDF plugin versions = 2.16.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject malicious code into the applicatio...

PT-2023-27587 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs plugin versions = 117 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user da...

PT-2023-27772 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: An authorization issue was addressed with improved state management, allowing an app to potentially bypass certain Privacy preferences. Recommendations: For versions prior to 14, update to macOS Sonoma ...

OPENSUSE-SU-2023:0267-1 Security update for tcpreplay

This update for tcpreplay fixes the following issues: Update to 4.4.4: overflow check fix for parsempls. tcpreplay-edit: prevent L2 flooding of ipv6 unicast packets. CVE-2023-27786: bugs caused by strtokr. boo1209416 CVE-2023-27783 reachable assert in tcpeditdltcleanup boo1209413 reachable assert...

PT-2023-28132 · Poll Maker Team · Poll Maker Plugin

Name of the Vulnerable Software and Affected Versions: Poll Maker Team Poll Maker plugin versions = 4.7.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-6035 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6 iOS versions prior to 16.7 iPadOS versions prior to 16.7 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 Description: A logic issue was...

PT-2023-5410 · Ipswitch · Moveit Transfer

Name of the Vulnerable Software and Affected Versions: MOVEit Transfer versions prior to 2021.1.8 13.1.8 MOVEit Transfer versions prior to 2022.0.8 14.0.8 MOVEit Transfer versions prior to 2022.1.9 14.1.9 MOVEit Transfer versions prior to 2023.0.6 15.0.6 Description: A SQL injection vulnerability...

PT-2023-22129 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2023 through 2024 Description: A maliciously crafted CATPART file can cause an Out-Of-Bounds Write when parsed through the software. This can be leveraged by a malicious actor to cause a crash, read sensitive data, o...

Rust Implant Used in New Malware Campaign Against Azerbaijan

By Waqas KEY FINDINGS Organizations should take steps to protect themselves from this campaign by keeping software up to date,… This is a post from HackRead.com Read the original post: Rust Implant Used in New Malware Campaign Against Azerbaijan...

PT-2024-13069 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 macOS Ventura versions prior to 13.6 macOS Monterey versions prior to 12.7 Description: A path handling issue was addressed with improved validation. This...

PT-2023-6647 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana version 8.10.0 Description: The issue impacts Kibana when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern, allowing sensitive information to be recorded in logs in the event of an error. The...

PT-2023-25088 · Unknown · Rts Vlink Virtual Matrix

Name of the Vulnerable Software and Affected Versions: RTS VLink Virtual Matrix Software versions 5.0 through 5.7.5 RTS VLink Virtual Matrix Software versions 6.0 through 6.4.9 Description: A command injection issue exists that allows an attacker to perform arbitrary code execution via the admin...

PT-2023-13418 · Red Hat · Red Hat Openshift Container Platform +1

Name of the Vulnerable Software and Affected Versions: cri-o versions as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 Description: The issue concerns an incorrect version of cri-o that is missing a fix, as released for certain versions of Red Hat OpenShift Contain...