5531 matches found
PT-2024-23551 · Ros · Ros
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials, posing a serious threat to the...
PT-2024-14534 · Unisoc (Shanghai) Technologies Co. +1 · T760/T770/T820/S8000 +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible improper input validation in the SecurityCommand message after security has been activated. This could lead to remote...
PT-2024-23633
Name of the Vulnerable Software and Affected Versions codesiddhant Jasmin Ransomware version 1.0.1 Description The issue allows an attacker to obtain sensitive information via the download file.php component due to a Directory Traversal vulnerability. This vulnerability can be exploited to access...
PT-2024-25379 · Unknown · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting some unknown functionality of the file admin/books/controller.php. The manipulation of the IBSN...
PT-2024-25284 · Sourcecodester · Aplaya Beach Resort Online Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file admin/mod roomtype/index.php. The manipulation of the id argument leads to S...
PT-2024-3859 · Cisco · Cisco Nexus Dashboard
Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: The issue is related to insufficient access controls on a specific API endpoint, allowing a remote attacker to gain unauthorized access to protected information by sending...
PT-2024-23720 · Wuzhicms · Wuzhi Cms
Name of the Vulnerable Software and Affected Versions: WUZHICMS version 4.1.0 Description: An issue was discovered in WUZHICMS, allowing an attacker to execute arbitrary code and obtain sensitive information via the "index.php" file. Recommendations: For WUZHICMS version 4.1.0, consider disabling...
Apache Pulsar 安全漏洞
Apache Pulsar is a U.S. Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as a distributed message flow platform. The software supports multi-tenancy, persistent storage, multi-room cross-region data replication with high scalability, high...
PT-2024-24112 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: A critical issue has been found in the processing of the file dede/makehtml archives action.php, leading to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...
PT-2024-2465 · Tenda · Tenda Fh1202
Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a stack overflow vulnerability in the fromAddressNat function, specifically in the page parameter. This vulnerability can be exploited by a remote attacker using a speciall...
PT-2024-23179 · Unknown · Code-Projects Online Book System
Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical issue has been found in the processing of the file /Product.php, where the manipulation of the argument value leads to sql injection. The attack may be initiated remotely. T...
JetBrains TeamCity Permission Issues Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a privilege issue...
PT-2024-23094 · Unknown · Sentrifugo
Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: The issue is related to a SQL injection vulnerability. It could allow a remote user to send a specially crafted query to the server and extract all the data from it. The vulnerability is exploited through t...
PT-2024-21991 · Unknown · Campcodes Complete Online Beauty Parlor Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Beauty Parlor Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/admin-profile.php. The manipulation of the adminname argument...
PT-2024-22631 · Softwarex · Softwarex
Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: A SQL injection issue exists in the script Handler CFG.ashx. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2024-11746 · Siklu · Siklu Tg Terragraph
Name of the Vulnerable Software and Affected Versions: Siklu TG Terragraph devices versions prior to 2.1.1 Description: The issue is related to a hardcoded root password in Siklu TG Terragraph devices, which was revealed through a brute force attack on an MD5 hash. This password can be used for...
PT-2024-20773 · Unknown · Magesh-K21 Online-College-Event-Hall-Reservation-System
Name of the Vulnerable Software and Affected Versions: MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description: A critical vulnerability was found in the system, affecting an unknown functionality of the file /login.php. The manipulation of the email argument leads to SQL...
PT-2024-21781 · Ibm · Ibm Integration Bus For Z/Os
Name of the Vulnerable Software and Affected Versions: IBM Integration Bus for z/OS versions 10.1 through 10.1.0.3 Description: The issue is related to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website...
PT-2024-2199 · Microsoft · Odbc Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue is related to insufficient input validation in the ODBC driver of Windows operating systems. It allows a remote attacker to execute arbitrary code. Recommendations: ...
PT-2024-13353 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was initially discovered and potentially associated with a specific identifier, but details about the issue itself, such as its nature...