PT-2024-23385 · Realmag777 · Wpcs

Name of the Vulnerable Software and Affected Versions: WPCS versions 1.2.0.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the realmag777 WPCS. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions 1.2.0.1 and...

PT-2024-7745 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the handling of Doc objects, resulting from the lack of proper validation of user-supplied data. This can lead to a read past the e...

PT-2024-22822 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-9289 Synology Surveillance Station versions prior to 9.2.0-11289 Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL...

PT-2024-12960 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue. It mentions a rejected or withdrawn CVE ID, but does not provide information about the issue itself...

PT-2024-23253 · Emacs +7 · Emacs +7

Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 29.3 Description: The issue is related to LaTeX preview being enabled by default for e-mail attachments in Emacs. This could potentially allow attackers to execute remote code. There is no information provided about th...

PT-2024-23254 · Gnu +9 · Emacs +10

Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 29.3 Org Mode versions prior to 9.6.23 Description: The issue arises because Org mode in Emacs considers the contents of remote files to be trusted. This could potentially lead to security issues if malicious content i...

PT-2024-13450 · Unknown +1 · Readymedia +1

Name of the Vulnerable Software and Affected Versions: ReadyMedia MiniDLNA version 1.3.3 Description: A stack-buffer-overflow issue allows attackers to cause a denial of service via the SendContainer function at tivo commands.c. Recommendations: For ReadyMedia MiniDLNA version 1.3.3, consider...

Tourism Management System v2.0 - Arbitrary File Upload

Exploit Title: Tourism Management System v2.0 - Arbitrary File Upload Google Dork: N/A Exploit Author: SoSPiro Date: 2024-02-18 Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/tourism-management-system-free-download/ Version: 2.0 Tested on: Windows 10 Pro Impact:...

Cross-site Scripting in Moodle Chat

The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's UsingChat page says "If you know some HTML code, you can use it in your text to do things like insert image...

PT-2024-21140 · Lychee · Lychee

Name of the Vulnerable Software and Affected Versions: Lychee version 3.1.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album. This is a Cross Site Scripting XSS issue. Recommendations: For Lych...

PT-2024-18124 · WordPress · File Manager

Name of the Vulnerable Software and Affected Versions: File Manager plugin for WordPress versions up to, and including, 7.2.4 Description: The issue is due to missing or incorrect nonce validation on the wp file manager page that includes files through the lang parameter. This makes it possible f...

Out Of Memory

giflib 5.1.4 is vulnerable to a memory leak out-of-memory in gif2rgb. The vulnerability is due to inadequate memory management in util/gif2rgb.c, enabling remote attackers to trigger an out-of-memory exception or denial of service via a GIF format file...

PT-2024-21265 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to a file upload restriction evasion vulnerability. This could allow an authenticated user to potentially obtain remote code execution RCE through a webshell, compromising the entire...

Atlassian Confluence < 8.5.3 - Remote Code Execution Exploit

Exploit Title: CVE-2023-22527: Atlassian Confluence RCE Vulnerability Exploit Author: MaanVader Vendor Homepage: https://www.atlassian.com/software/confluence Software Link: https://www.atlassian.com/software/confluence Version: 8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, 8.5.0-8.5.3 Tested on: 8.5.3 CVE ...

PT-2024-2920 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Null Pointer Dereference issue in the WLAvalancheService component allows an authenticated remote attacker to perform denial of service attacks. The vulnerability is related to pointer...

Denial Of Service (DOS)

intel-microcode is vulnerable to Denial Of Service. The vulnerability is due to a failure in the protection mechanism of the bus lock regulator, which may allow an unauthenticated user to potentially enable denial of service via network access...

LaborOfficeFree 19.10 - MySQL Root Password Calculator

Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator - CVE-2024-1346 Google Dork: N/A Date: 09/02/2023 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor Homepage: https://www.laborofficefree.com/ Software Link: https://www.laborofficefree.com/plans Version: 19.10 Tested on...

PT-2024-10423 · Dcmtk +4 · Dcmtk +4

Name of the Vulnerable Software and Affected Versions: DCMTK versions prior to 3.6.9 Description: The issue is related to a segmentation fault in the dcmdata component of the DCMTK library, which can be triggered by an invalid DIMSE message. This can potentially allow a remote attacker to cause a...

PT-2024-20265 · Unknown · Code-Projects Scholars Tracking System

Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue allows attackers to run arbitrary code via the Personal Information Update information, potentially leading to unauthorized access and data manipulation. Recommendation...

Numbas Remote Code Execution

Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...