PT-2025-20766

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 and versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5...

WordPress Quick Event Manager Plugin < 9.8.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Quick Event Manager Type Plugin Vulnerable versions 9.8.5.3 Fixed in 9.8.5.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Fullworks Plugins PSID 5068fcdc6585 Credits Rafie Muhammad Patchstac...

PT-2023-3701 · Oracle · Oracle Essbase

Name of the Vulnerable Software and Affected Versions: Oracle Essbase version 21.4.3.0.0 Description: The issue is related to insufficient input validation in the Security and Provisioning component of Oracle Essbase. Exploitation of this issue can allow an attacker to gain unauthorized access to...

PT-2023-33012 · Unknown +3 · Remove Dir All +3

Name of the Vulnerable Software and Affected Versions: tempfile versions prior to the version that updates remove dir all to a non-vulnerable version remove dir all version 0.5.3 Description: The issue concerns a problem with the remove dir all function. Updating tempfile is necessary due to its...

CleverTap Cordova plugin vulnerable to Cross-site Scripting

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

PT-2023-26125 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-26126 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was initially considered but further investigation showed it was not a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no...

PT-2023-25465 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

News Portal v4.0 - SQL Injection (Unauthorized)

Exploit Title: News Portal v4.0 - SQL Injection Unauthorized Date: 09/07/2023 Exploit Author: Hubert Wojciechowski Contact Author: [email protected] Vendor Homepage: https://phpgurukul.com/news-portal-project-in-php-and-mysql/c Software Link:...

copyparty vulnerable to path traversal attack

Summary All versions before 1.8.2 have a path traversal vulnerability, allowing an attacker to download unintended files from the server. Details Unauthenticated users were able to retrieve any files which are accessible according to OS-level permissions from the copyparty process. Usually, this ...

PT-2023-25689 · Unknown · Webmention.Js

Name of the Vulnerable Software and Affected Versions: webmention.js versions prior to 0.5.5 Description: The issue is related to Cross-site Scripting XSS - DOM in the webmention.js GitHub repository. This type of attack occurs when an application includes user input in its output without proper...

PT-2023-24817 · Jami · Jami

Name of the Vulnerable Software and Affected Versions: Jami affected versions not specified Description: The issue arises when a user inserts special characters into the nickname field within the Jami application, causing it to fail and resulting in a local denial of service. This prevents the...

PT-2023-7155 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.006.20360 and earlier Adobe Acrobat Reader versions 20.005.30524 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read...

PT-2023-26019 · Elecom · Elecom Wtc-C1167Gc-W +3

Name of the Vulnerable Software and Affected Versions: ELECOM WRH-300WH-H versions 2.12 and earlier ELECOM WTC-300HWH versions 1.09 and earlier ELECOM WTC-C1167GC-B versions 1.17 and earlier ELECOM WTC-C1167GC-W versions 1.17 and earlier Description: The issue allows a remote unauthenticated...

PT-2023-17067

Name of the Vulnerable Software and Affected Versions Elra Parkmatik versions prior to 02.01-a51 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection through SOAP parameter...

PT-2023-24541 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

PT-2023-3920 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows OLE technology, which allows binding and embedding objects into other documents and objects. This can lead to remote cod...

PT-2023-19567 · WordPress · Scott Paterson Contact Form 7 – Paypal & Stripe Add-On

Name of the Vulnerable Software and Affected Versions: Scott Paterson Contact Form 7 – PayPal & Stripe Add-on plugin versions prior to 1.9.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-25808 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Pizza Ordering System version 1.0 Description: The issue is related to a Cross-site scripting XSS vulnerability. This vulnerability is located in the "/admin/index.php?page=categories" endpoint, specifically in the...

PT-2023-25203 · Outline · Outline

Name of the Vulnerable Software and Affected Versions: outline/outline versions prior to 0.70.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing an...