PT-2023-5639 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 117.0.5938.132 Description: The issue is related to a use after free in the Extensions component of Google Chrome, which could allow an attacker to exploit heap corruption via a crafted HTML page if a user is...

PT-2023-28733 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. This vulnerability is present in the component admin ip.php. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin ip.p...

PT-2023-26905 · Unknown · Siberiancms

Name of the Vulnerable Software and Affected Versions: SiberianCMS affected versions not specified Description: The issue concerns improper access control, allowing an authorized user to disable a security feature over the network. Recommendations: At the moment, there is no information about a...

PT-2023-28721 · Macrob7 · Macrob7 Macs Framework Content Management System

Name of the Vulnerable Software and Affected Versions: Macrob7 Macs Framework Content Management System CMS version 1.1.4f Description: The issue is related to a PHP type confusion vulnerability due to loose comparison in the isValidLogin function during a login attempt. This vulnerability can le...

PT-2023-25090 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 20.1 Description: A heap-based buffer overflow vulnerability exists in the pictwread functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file t...

PT-2023-19047 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 20.1 Description: A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality. This can be triggered by a specially crafted file, potentially leading to arbitrary code execution. An...

PT-2023-28606 · Unknown +1 · Gomarkdown/Markdown +1

Name of the Vulnerable Software and Affected Versions: github.com/gomarkdown/markdown versions prior to 0.0.0-20230922105210-14b16010c2ee Description: The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Parsing malformed markdown input with ...

GHSA-J646-GJ5P-P45G CefSharp affected by heap buffer overflow in WebP

Google is aware that an exploit for CVE-2023-4863 exists in the wild. Description Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical References -...

PT-2023-24931

Name of the Vulnerable Software and Affected Versions PrestaShop opartfaq versions 1.0.3 and earlier Description The issue allows remote attackers to run arbitrary SQL commands via an unspecified vector, potentially leading to unauthorized access or data manipulation. This is due to a SQL injecti...

PT-2023-5412 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 Description: The issue is related to a stack overflow in the SetWLanRadioSecurity function, specifically via the TXPower and GuardInt parameters. This can potentially allow a remote attacker to impact the...

PT-2023-27999 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: A stored cross-site scripting XSS vulnerability in the Add Animal Details function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of...

PT-2023-28639 · Frauscher Sensortechnik Gmbh · Fds101

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all previous versions Description: The issue is related to a SQL injection vulnerability that can be exploited via manipulated parameters of the web interface without...

PT-2023-26654

Name of the Vulnerable Software and Affected Versions msaad1999's PHP-Login-System version 2.0.1 Description A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in the web browser of a user. This is achieved by including a malicious payload into the...

PT-2023-28710 · Netis · Netis 360Rac1200

Name of the Vulnerable Software and Affected Versions: Netis 360RAC1200 version 1.3.4517 Description: The issue allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Recommendations: For...

PT-2023-26849 · Dell · Dell Emc Scg Policy Manager

Name of the Vulnerable Software and Affected Versions: Dell SCG Policy Manager version 5.16.00.14 Description: The issue concerns a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing Man-in-the-Middle MitM...

PT-2023-11661 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IOBit Malware Fighter version 8.0.2 Description: An issue was discovered in ImfHpRegFilter.sys, allowing local attackers to cause a denial of service DoS. Recommendations: For IOBit Malware Fighter version 8.0.2, consider updating to a newer...

PT-2023-15400 · Ekorccp +1 · Ekorccp +1

Name of the Vulnerable Software and Affected Versions: ekorCCP affected versions not specified ekorRCI affected versions not specified Description: The issue arises due to access to the FTP service using default credentials. This can allow an attacker to modify critical files, potentially leading...

The vulnerability of the protection mechanism of the network traffic analysis, network detection, and response software Cortex XDR Agent for Windows operating systems allows attackers to disable the Cortex XDR Agent.

The vulnerability of the protection mechanism for network traffic analysis, network detection, and response in the Cortex XDR Agent for Windows operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow attackers to disable the Cortex XDR Agen...

PT-2023-5463 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through 7 Description: An issue was discovered in the tarExtract function, which implements TAR file extraction and processes files within an archive that have relative or absolute file paths. This could lead t...

PT-2023-31480 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.18 Description: A problematic issue has been identified, affecting the install.php file of the Installation Handler component. The manipulation of the contents argument with the input alert'xss' leads to cross-site...