PT-2023-18888

Name of the Vulnerable Software and Affected Versions WooCommerce Google Sheet Connector WordPress plugin versions prior to 1.3.6 Description The issue concerns a lack of CSRF check when updating the Access Code, allowing attackers to potentially make logged-in admins change the access code to an...

PT-2023-18894 · WordPress · Caldera Forms Google Sheets Connector

Name of the Vulnerable Software and Affected Versions: Caldera Forms Google Sheets Connector WordPress plugin versions prior to 1.3 Description: The issue is related to the lack of a CSRF check when updating the Access Code in the Caldera Forms Google Sheets Connector WordPress plugin. This could...

PT-2023-25145 · WordPress · Mycred

Name of the Vulnerable Software and Affected Versions: myCred plugin versions = 2.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the...

PT-2023-26216 · WordPress · Faboba Falang Multilanguage

Name of the Vulnerable Software and Affected Versions: Faboba Falang multilanguage for WordPress plugin versions = 1.3.39 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that...

PT-2023-22015 · Progress · Progress Chef Infra Server

Name of the Vulnerable Software and Affected Versions: Progress Chef Infra Server versions prior to 15.7 Description: The issue allows a local attacker to access sensitive information by exploiting a world-readable temporary backup path at /var/opt/opscode/local-mode-cache/backup. This results in...

PT-2023-19100 · WordPress · Wp Life Album Gallery

Name of the Vulnerable Software and Affected Versions: A WP Life Album Gallery – WordPress Gallery plugin versions = 1.4.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-20893 · WordPress · Gravity Forms

Name of the Vulnerable Software and Affected Versions: Gravity Forms WordPress plugin versions prior to 2.7.5 Description: The issue is related to Reflected Cross-Site Scripting, which occurs because the plugin does not properly escape generated URLs before outputting them in attributes. This cou...

PT-2023-32994 · Unknown · Pocketmine

Name of the Vulnerable Software and Affected Versions: PocketMine versions prior to 4.22.3 PocketMine versions prior to 5.2.1 Description: A player can cause the server to crash by sending a packet with incorrect sign data in NBT in the BlockActorDataPacket. This can be achieved by sending an NBT...

PT-2023-17641 · WordPress · Buy Me A Coffee – Button/Widget Plugin

Name of the Vulnerable Software and Affected Versions: Buy Me a Coffee – Button and Widget Plugin versions up to, and including, 3.6 Description: The issue arises from insufficient sanitization and escaping on the text value set via the bmc post reception action, allowing authenticated attackers...

PT-2023-22310 · Unknown · Florist Site

Name of the Vulnerable Software and Affected Versions: Florist Site versions prior to 3.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2023-26144 · Panda Security · Panda Security Vpn

Name of the Vulnerable Software and Affected Versions: Panda Security VPN for Windows versions prior to 15.14.8 Description: A DLL hijacking issue allows attackers to execute arbitrary code by placing a crafted DLL file in the same directory as the executable. Recommendations: For versions prior ...

PT-2023-25877 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: Auto-GPT versions prior to 0.4.3 Description: The issue allows for a path traversal attack, enabling the overwrite of any .py file outside the workspace directory by specifying a malicious basename argument, such as ../../../main.py. This can...

PT-2023-25876 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: Auto-GPT versions prior to 0.4.3 Description: The issue arises from the use of a different docker-compose.yml file when running Auto-GPT by cloning the git repo and executing docker compose run auto-gpt in the repo root. This file mounts itse...

PT-2023-3804

Name of the Vulnerable Software and Affected Versions SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description The issue is related to improper neutralization of special elements used in an SQL command, allowing an unauthenticated attacker to...

PT-2023-3991 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to the use of a hard-coded cryptographic key in SonicWall Analytics and SonicWall Global Management System GMS...

PT-2023-26279 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05.1 Description: The issue concerns the potential exposure of sensitive information. In JetBrains TeamCity, build parameters of the password type could be written to the agent log, which could lead t...

PT-2023-25478 · Unknown · Tarteaucitron.Js

Name of the Vulnerable Software and Affected Versions: tarteaucitron.js versions prior to 1.13.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository amauric/tarteaucitron.js. Recommendations: For versions prior to 1.13.1, update to version...

PT-2023-9292 · Opendkim +1 · Opendkim +1

Name of the Vulnerable Software and Affected Versions: OpenDKIM versions 2.10.3 and earlier OpenDKIM versions 2.11.x through 2.11.0-Beta2 Description: An issue in OpenDKIM allows a remote attacker to craft an e-mail message with a fake sender address, making programs that rely on...

PT-2023-3475 · Siemens · Simatic Cn 4100

Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: The issue is related to errors in access management, specifically improper access controls in configuration files, which can lead to privilege escalation. An attacker, acting remotely, could...

PT-2023-19898 · Unknown · Denishua Comment Reply Notification

Name of the Vulnerable Software and Affected Versions: Denishua Comment Reply Notification plugin versions = 1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...