PT-2024-24390 · Aitthemes · Citadela Listing

Name of the Vulnerable Software and Affected Versions: AitThemes Citadela Listing versions prior to 5.20.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicati...

PT-2024-24568 · Unknown · Seo Booster

Name of the Vulnerable Software and Affected Versions: SEO Booster versions 3.8.9 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

PT-2024-24394 · Unknown · Digital Publications By Supsystic

Name of the Vulnerable Software and Affected Versions: Supsystic Digital Publications versions 1.7.7 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent...

PT-2024-22483 · WordPress · The Simple Buttons Creator

Name of the Vulnerable Software and Affected Versions: Simple Buttons Creator WordPress plugin versions 1.04 and earlier Description: The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks...

PT-2024-23951 · Unknown · Fetch Designs Sign-Up Sheets

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets versions n/a through 2.2.11.1 Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a web applicatio...

CVE-2023-5392

CVE-2023-5392 describes a memory information leak in Honeywell C300 via an analysis feature that allows memory data to be extracted over the network beyond what is needed for function. Public docs (NCSC ICS advisory, Red Hat entry, Tenable plugin) tie this to Honeywell Experion PKS/LX/PlantCruise...

PT-2024-24413

Name of the Vulnerable Software and Affected Versions XLPlugins Finale Lite versions 2.18.0 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

PT-2024-24006 · Bunny.Net · Bunny.Net

Name of the Vulnerable Software and Affected Versions: bunny.Net versions n/a through 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...

PT-2024-23312 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.3, 27.9.2 and earlier Description: The issue is a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2024-23897 · WordPress · Webtoffee Wordpress Backup & Migration

Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Backup & Migration versions 1.4.7 and earlier Description: The issue is related to the insertion of sensitive information into log files. There is no information provided about the estimated number of potentially affected...

PT-2024-18400 · WordPress · Easy Property Listings

Name of the Vulnerable Software and Affected Versions: Easy Property Listings plugin for WordPress versions up to, and including, 3.5.2 Description: The issue is related to time-based SQL Injection via the property status shortcode attribute. This is due to insufficient escaping on the...

PT-2024-3046

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP2 Description: A vulnerability has been identified that allows authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal, which could allow an authenticat...

PT-2024-11657 · Abrhilsoft · Abrhilsoft Employee'S Portal

Name of the Vulnerable Software and Affected Versions: AbrhilSoft Employee's Portal versions prior to 5.6.2 Description: The issue is related to a SQL injection vulnerability found in the login page. This vulnerability can potentially be exploited to extract or modify sensitive data from the...

PT-2024-21583 · Siyuan · Siyuan

Name of the Vulnerable Software and Affected Versions: SiYuan version 3.0.3 Description: The issue allows executing arbitrary commands on the server due to the application being vulnerable to Server Side XSS. Recommendations: For SiYuan version 3.0.3, update to a version that fixes the Server Sid...

PT-2024-2624 · Nghttp2 +10 · Nghttp2 +10

Name of the Vulnerable Software and Affected Versions: nghttp2 versions prior to 1.61.0 Description: The nghttp2 library keeps reading an unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync, causing excessive CPU usage to decode the HPACK...

PT-2024-22572 · Ibm · Ibm Cloud Pak For Security +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.10.18.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue concerns the storage of user credentials in plain clear text, which can be read by an...

PT-2024-3276

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 123.0.6312.105 Description The issue is related to out of bounds memory access in the V8 engine of Google Chrome, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can lead...

PT-2024-3606 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 2024.1.0.23997 Description: A type confusion vulnerability exists in the way Foxit Reader handles a Lock object. This can be triggered by a specially crafted Javascript code inside a malicious PDF document, leading to...

PT-2024-23775 · Unknown · Yoo Slider

Name of the Vulnerable Software and Affected Versions: Yoo Slider versions through 2.1.1 Description: The issue affects Yoo Slider, allowing Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For versions through 2.1.1, update to a version that...

PT-2024-23758 · Unknown · Hacklog Down As Pdf

Name of the Vulnerable Software and Affected Versions: Hacklog Down As PDF versions 2.3.6 and earlier Description: The issue affects the Hacklog Down As PDF software, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For versions 2.3.6...