PT-2023-2725 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The flaw exists within the soap serverd binary, where the...

PT-2023-9890 · Unknown · Lierdakil Click-Reminder

Name of the Vulnerable Software and Affected Versions: lierdakil click-reminder affected versions not specified Description: A critical issue was found in lierdakil click-reminder, affecting the function db query of the file src/backend/include/BaseAction.php. This issue leads to SQL injection. T...

PT-2023-9889 · Unknown · Msmania Poodim

Name of the Vulnerable Software and Affected Versions: msmania poodim affected versions not specified Description: A critical issue was found in the Command Line Argument Handler component, leading to a stack-based buffer overflow. This can be initiated remotely. Recommendations: At the moment,...

PT-2023-16160 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Online Food Ordering System, affecting the Login Module in the file admin class.php. The...

PT-2023-10221 · Unknown · Dovgalyuk Aibattle

Name of the Vulnerable Software and Affected Versions: Dovgalyuk AIBattle affected versions not specified Description: A critical vulnerability was found in Dovgalyuk AIBattle. The issue affects the registerUser function in the file site/procedures.php. The manipulation of the postLogin argument...

PT-2023-18964

Name of the Vulnerable Software and Affected Versions UPX affected versions not specified Description A heap-based buffer overflow issue was discovered in UPX in the PackTmt::pack function in the p tmt.cpp file. The issue allows an attacker to cause a denial of service abort via a crafted file...

PT-2023-10145 · Unknown · Gmail-Servlet

Name of the Vulnerable Software and Affected Versions: gmail-servlet affected versions not specified Description: A critical issue was found in the function search of the file src/Model.java, which leads to sql injection. Recommendations: At the moment, there is no information about a newer versi...

PT-2023-1254 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue exists due to insufficient input validation in the 3D Builder program. Exploitation of this issue may allow an attacker to execute arbitrary code on the target system by openin...

PT-2023-1259 · Microsoft · Windows Error Reporting Service +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Service, which can be exploited to elevate privileges. This allows an attacke...

PT-2023-1253 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue exists due to insufficient input validation in the 3D Builder program, which can allow an attacker to execute arbitrary code on the target system by opening a specially crafted...

PT-2023-1125 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel. It allows an attacker to elevate their privileges. Recommendations: At the moment, there i...

PT-2023-1136 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: The issue is related to insufficient access control in the Windows Local Security Authority LSA service, which can be exploited to elevate privileges. This allo...

PT-2023-9612 · Microsoft +7 · .Net Framework +7

Name of the Vulnerable Software and Affected Versions: Microsoft .NET affected versions not specified Description: The issue is related to flaws in the deserialization mechanism of the Microsoft .NET platform. It allows a remote attacker to cause a denial of service. Recommendations: At the momen...

PT-2023-1094 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Bind Filter Driver, which can be exploited to bypass security restrictions and elevate privileges...

PT-2023-1132 · Microsoft · Windows Netlogon +1

Name of the Vulnerable Software and Affected Versions: Windows Netlogon affected versions not specified Description: The issue is related to insufficient input validation in the Windows Netlogon service, which can be exploited by a remote attacker to cause a denial of service. This allows attacke...

PT-2023-1093 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, which could allow an attacker to disclose protected information. This may enable the attacker to...

PT-2023-1095 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft Exchange Server, which can be exploited to elevate privileges. This allows an attacker to affect the syste...

PT-2023-1097 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. This can allow an...

PT-2023-1161 · Microsoft · Windows Authentication +1

Name of the Vulnerable Software and Affected Versions: Windows Authentication affected versions not specified Description: The issue is related to insufficient input validation in the Windows Authentication component, allowing remote attackers to execute arbitrary code by using specially crafted...

PT-2023-1233 · Microsoft · Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft DWM Core Library affected versions not specified Description: The issue is related to insufficient access control in the Microsoft DWM Core Library of Windows operating systems. It allows an attacker to elevate their privileges,...