PT-2024-6803 · Unknown · Angular-Base64-Upload

Name of the Vulnerable Software and Affected Versions: angular-base64-upload versions prior to v0.1.21 Description: The issue is related to the angular-base64-upload library, which has a vulnerability that allows an attacker to execute arbitrary code on the server by uploading a specially crafted...

PT-2025-28388 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue is related to an out-of-bounds read in decoding a malformed frame header in libsavsvc.so. This allows local attackers to cause memory corruption. Recommendations: For versions prior to Andro...

PT-2024-30: Stored DOM-Based Cross-Site Scripting (stored DOM XSS) in Passwork

The vulnerability was identified in Passwork version 6.4.0. The application does not process the data received from the user, which is necessary for safety use during web page formation. Exploitation of the vulnerability is possible for an authorized user and leads to the possibility of executing...

PT-2024-33: Business logic vulnerability in Passwork

The vulnerability was identified in Passwork version 6.4.0. The application's logic requires the user to perform a correct sequence of actions to implement the functionality. The vulnerability in the business logic can be exploited by an attacker to gain access to the application's functionality...

PT-2024-7463

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions 9.8 SP1 FP2 9.8.1.201 and earlier Description: A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab could allow an unauthenticated attacker to conduct a path traversal attack due to...

PT-2025-11524 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to Improper Privilege Management, which could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized...

PT-2024-7643 · X.Org +11 · X.Org Server +11

Name of the Vulnerable Software and Affected Versions: X.Org Server versions prior to 21.1.14 Description: A flaw was found in the X.org server due to improperly tracked allocation size in XkbSetCompatMap, allowing a local attacker to trigger a buffer overflow condition via a specially crafted...

PT-2024-39351 · WordPress · Custom Twitter Feeds

Name of the Vulnerable Software and Affected Versions: Custom Twitter Feeds WordPress plugin versions prior to 2.2.3 Description: The issue allows high privilege users to inject scripts due to the plugin not filtering some of its settings. Recommendations: For versions prior to 2.2.3, update to...

PT-2024-26091

Name of the Vulnerable Software and Affected Versions Sound Assistant versions prior to 6.1.0.9 Description The issue concerns the use of implicit intent for sensitive communication in Sound Assistant, allowing local attackers to obtain sensitive information. Recommendations For versions prior to...

PT-2024-9590 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: The issue is related to a use-after-free vulnerability in the GStreamer multimedia framework. This vulnerability is associated with the processing of CodecPrivate elements in Matroska streams...

PT-2024-26084 · Unknown · Libsef.Quram.So

Name of the Vulnerable Software and Affected Versions: libSEF.quram.so versions prior to SMR Oct-2024 Release 1 Description: The issue is related to an integer overflow in libSEF.quram.so, which allows local attackers to write out-of-bounds memory. This can be exploited by local attackers...

PT-2024-32557 · Pickplugins · Pickplugins Accordion

Name of the Vulnerable Software and Affected Versions: PickPlugins Accordion versions 2.2.99 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in PickPlugins Accordion...

PT-2024-32297 · Artifex +6 · Artifex Ghostscript +6

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 10.04.0 Description: An issue was discovered in the decode utf8 function in base/gp utf8.c of Artifex Ghostscript. This issue is related to overlong UTF-8 encoding, which can lead to possible ../ director...

PT-2024-9617

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description The issue is related to an out-of-bounds read vulnerability in the parse ds64 function within gstwavparse.c. This vulnerability allows reading beyond the bounds of the data buffer, potentially...

PT-2024-7275 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.69 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Extensions, allowing a remote attacker to bypass site isolation via a crafted...

PT-2024-9619 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: A null pointer dereference vulnerability has been identified in the gst gdk pixbuf dec flush function within gstgdkpixbufdec.c. This function invokes memcpy, using out pix as the destination...

PT-2024-10268

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 24.09 Description This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability, as the targ...

PT-2024-37591 · Parisneo · Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui versions below v9.8 Description: A Local File Inclusion issue exists due to unverified path concatenation in the serve js function in app.py, allowing attackers to perform path traversal attacks. This can lead to...

PT-2024-29682 · Unknown · Smart-Tab Android App

Name of the Vulnerable Software and Affected Versions: Smart-tab Android app versions prior to May 2023 Description: The issue concerns an active debug code vulnerability in the Smart-tab Android app. If exploited, an attacker with physical access to the device may use the debug function to acces...

PT-2024-9583 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: A null pointer dereference vulnerability has been discovered in the gst matroska demux update tracks function within matroska-demux.c. The vulnerability occurs when the gst caps is equal functi...