PT-2023-25070 · Asus · Asus Rt-N10Lx Router

Name of the Vulnerable Software and Affected Versions: Asus RT-N10LX Router version 2.0.0.39 Description: A stack overflow issue was discovered via the mac parameter at the "/start-apply.html" API endpoint. This issue only affects products that are no longer supported by the maintainer...

PT-2023-24418 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the ipqos lanip dellist interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, as a...

PT-2023-21020 · Unknown · Lavalite Cms

Name of the Vulnerable Software and Affected Versions: LavaLite CMS version 9.0.0 Description: The issue is related to a host header injection attack. This type of attack involves manipulating the host header in HTTP requests to potentially bypass security controls or access unauthorized resource...

PT-2023-22351 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 3.1.2 Description: The issue is a Cross Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via the Post function. This enables attackers to potentially inject malicious scripts into the websit...

PT-2023-32966 · Avideo · Avideo

Name of the Vulnerable Software and Affected Versions: AVideo affected versions not specified Description: The issue is related to a parameter success that does not properly sanitize symbol characters, leading to a potential XSS attack. This could allow an attacker to take over an admin's account...

PT-2023-22673 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0 Description: A heap overflow issue was discovered in YASM via the handle dot label function at /nasm/nasm-token.re. This issue has been disputed by third parties, arguing it is a bug rather than a security issue because YAS...

PT-2023-2178 · Cisco · Cisco Evolved Programmable Network Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to the web-based management interface of the affected systems, allowi...

PT-2023-21331 · Wondershare · Wondershare Repairit

Name of the Vulnerable Software and Affected Versions: Wondershare Repairit version 3.5.4 Description: An issue in Wondershare Repairit allows a remote attacker to execute arbitrary commands via the repairit setup full5913.exe file. Recommendations: For version 3.5.4, consider removing or...

PT-2023-13664 · Unknown · Bluepage Cms

Name of the Vulnerable Software and Affected Versions: BluePage CMS versions 3.9 and earlier Description: The issue allows MySQL Injection in the User-Agent field using a Time-based blind SLEEP payload due to insufficient sanitization of HTTP Headers. Recommendations: For BluePage CMS versions 3....

PT-2023-16525 · Sourcecodester · Sourcecodester Best Online News Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical issue has been found in the Login Page component, where the manipulation of the username argument leads to SQL injection. This can be exploited remotely...

PT-2023-10341 · Unknown · Mosbth Cimage

Name of the Vulnerable Software and Affected Versions: mosbth cimage versions up to 0.7.18 Description: A vulnerability was found in mosbth cimage, affecting an unknown functionality of the file check system.php. The manipulation of the argument $ SERVER'SERVER SOFTWARE' leads to cross site...

PT-2023-15586 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was found via the username parameter in the setting/setOpenVpnCertGenerationCfg function. This allows for potential command injection attacks. Recommendation...

PT-2023-33235 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A memory leak issue was discovered in the raydium i2c send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-11692 · Unknown · Starcounter-Jack Json-Patch

Name of the Vulnerable Software and Affected Versions: Starcounter-Jack JSON-Patch versions up to 3.1.0 Description: A vulnerability has been found in Starcounter-Jack JSON-Patch, classified as problematic. This issue affects unknown code and leads to improperly controlled modification of object...

PT-2022-27994 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue concerns improper access control in the usememos/memos GitHub repository. This allows unauthorized access to certain resources. No information is provided about the estimated numbe...

PT-2022-27892 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A command injection issue was discovered via the mac parameter at the "/goform/WriteFacMac" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider restricti...

PT-2022-27658 · Opencaching Deutschland · Oc-Server3

Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic vulnerability was found in the Cachelist Handler component, specifically in the file htdocs/templates2/ocstyle/cachelists.tpl. The manipulation of t...

PT-2022-36589 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue allows the tcp cdg release function to be called multiple times. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impact...

PT-2022-27952 · Jenkins · Jenkins Sonar Gerrit Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Sonar Gerrit Plugin versions 377.v8f3808963dc5 and earlier Description: A cross-site request forgery CSRF issue allows attackers to have Jenkins connect to Gerrit servers using attacker-specified credentials IDs, potentially capturing...

PT-2022-27611 · Tenda · Tenda I22

Name of the Vulnerable Software and Affected Versions: Tenda i22 version 1.0.0.34687 Description: A buffer overflow issue was discovered via the index parameter in the formWifiMacFilterGet function. This allows for potential exploitation. Recommendations: For Tenda i22 version 1.0.0.34687, as a...