PT-2024-23518 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is related to a stack overflow vulnerability. This vulnerability is located in the deviceId parameter of the saveParentControlInfo function. Recommendations: For Tenda FH1203 version 2.0.1.6...

PT-2024-23505 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function. This vulnerability can be exploited, potentially allowing attackers to execute arbitrary...

PT-2024-15936 · WordPress · Wp Erp

Name of the Vulnerable Software and Affected Versions: WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.12.9 Description: The issue is related to time-based SQL Injection via the id parameter in the...

PT-2025-3588

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library versions 2.0.16 and earlier Description A heap-based buffer over-read issue occurs when parsing triples with the nquads parser in the raptor ntriples parse term internal function. This issue affects the Raptor RDF...

PT-2024-2454 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is related to a stack overflow vulnerability in the security 5g parameter of the formWifiBasicSet function. This vulnerability can be exploited by a remote attacker to impact the...

PT-2024-23504 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a stack overflow vulnerability. It affects the security 5g parameter of the formWifiBasicSet function. Recommendations: For Tenda FH1202 version 1.2.0.14408, consider...

CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

PT-2024-23154 · Unknown · Crypto Converter Widget

Name of the Vulnerable Software and Affected Versions: Crypto Converter Widget versions 1.8.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2024-2450

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.2.1 Splunk Enterprise versions prior to 9.1.4 Splunk Enterprise versions prior to 9.0.9 Description The issue is related to the exposure of authentication tokens in Splunk Enterprise. This exposure can occ...

PT-2024-23177 · Unknown · Code-Projects Online Book System

Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical vulnerability was found in the code-projects Online Book System. This issue affects the file /index.php and is related to the manipulation of the username, password, login...

PT-2024-23161 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue has been found, affecting the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument mac leads to a stack-based buffer overflow. Th...

PT-2024-23120 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue was found in the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to a stack-based buffer overflow. It is possible to initiate...

PT-2024-23148 · WordPress · Wpwax Post Grid

Name of the Vulnerable Software and Affected Versions: wpWax Post Grid, Slider & Carousel Ultimate versions 1.6.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

PT-2024-23055 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue was found in the function form fast setting wifi set of the file /goform/fast setting wifi set. The manipulation of the argument ssid leads to a stack-based buffer overflow. It is...

PT-2024-23093 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability has been found, affecting the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument mac leads to a stack-based buffer...

PT-2024-23185 · Tenda · Tenda Fh1205

Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: A critical issue has been found in the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack may...

PT-2024-23083 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue affects the function formQuickIndex of the file /goform/QuickIndex, where the manipulation of the PPPOEPassword argument leads to a stack-based buffer overflow. This can be...

PT-2024-26744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when disabling the stream encoder in the Linux kernel's drm/amd/display module, which invokes a function that no longer exists. This can cause a crash. The problem occur...

PT-2024-23142 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely...

PT-2024-13815 · Klbtheme · Klbtheme Clotya +5

Name of the Vulnerable Software and Affected Versions: KlbTheme Cosmetsy theme core plugin versions 1.3.0 and earlier KlbTheme Partdo theme core plugin versions 1.0.9 and earlier KlbTheme Bacola theme core plugin versions 1.3.3 and earlier KlbTheme Medibazar theme core plugin versions 1.2.3 and...