PT-2023-8675

Name of the Vulnerable Software and Affected Versions ZBar version 0.23.90 Description A heap-based buffer overflow exists in the qr reader match centers function. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this issue, an attacker can...

PT-2023-26714 · Qdrant · Qdrant

Name of the Vulnerable Software and Affected Versions: qdrant version 1.3.2 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the chucnked vectors.rs component. This issue affects qdrant, enabling an attacker to disrupt service. Recommendations: For...

PT-2023-11510 · Unknown · Earcms Ear App

Name of the Vulnerable Software and Affected Versions: Earcms Ear App version 20181124 Description: An issue in Earcms Ear App allows a remote attacker to execute arbitrary code via the "uload/index-uplog.php" endpoint. This enables the attacker to perform unauthorized actions on the affected...

CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...

CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...

CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...

PT-2023-5312 · Ansible · Ansible

Name of the Vulnerable Software and Affected Versions: ansible semaphore version 2.8.90 Description: The issue in ansible semaphore allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter. This is related to incorrect code generation management in...

PT-2023-8337 · Unknown · Smartnode Sn200

Name of the Vulnerable Software and Affected Versions: SmartNode SN200 aka SN200 version 3.21.2-23021 Description: The issue is related to the Network Diagnostic Commands function of the SmartNode SN200 analog telephone adapter's firmware, which fails to neutralize special elements used in an...

PT-2023-27616 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to Cross Site Scripting XSS via the action parameter of "index.php". This allows for potential malicious script execution. The estimated number of potentially affecte...

PT-2023-27619 · Phpjabbers · Phpjabbers Car Rental Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Car Rental Script version 3.0 Description: The issue allows remote attackers to take over accounts due to a lack of verification when changing an email address and/or password on the Profile Page. Recommendations: For PHPJabbers Ca...

PT-2023-29575 · Sourcecodester · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Graduate Tracer System version 1.0 Description: A critical issue was found, affecting the mysqli query function of the file sexit.php. The manipulation of the id argument leads to SQL injection. The attack can be launche...

PT-2023-27640 · Phicomm · Phicomm K2

Name of the Vulnerable Software and Affected Versions: Phicomm k2 version 22.6.529.216 Description: The Phicomm k2 router contains a command injection vulnerability via the luci.sys.call function. This issue allows for remote command execution. Recommendations: For Phicomm k2 version 22.6.529.216...

PT-2023-25477 · Unknown · Skalenetwork Sgxwallet

Name of the Vulnerable Software and Affected Versions: skalenetwork sgxwallet versions 1.9.0 and below Description: The issue allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component. Recommendations: For versions 1.9.0 and below, consider disabling the...

PT-2023-25476 · Skalenetwork · Skalenetwork Sgxwallet

Name of the Vulnerable Software and Affected Versions: skalenetwork sgxwallet version 1.9.0 Description: The issue allows an attacker to cause a denial of service via the trustedBlsSignMessage function. This is a Buffer Overflow vulnerability. Recommendations: For skalenetwork sgxwallet version...

PT-2023-27645 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The issue arises from the sub 451784 function not validating user-entered parameters, leading to a stack overflow. Recommendations: For Tenda AC23 version 16.03.07.45 cn, as a temporary workaroun...

PT-2023-4612 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version v4 US AC10V4.0si V16.03.10.13 cn Description: The issue is related to a stack overflow vulnerability via the parameter list and bindnum at the "/goform/SetIpMacBind" API endpoint. This vulnerability may allow a remote...

Cloud ADM || How to Disable Auto-License in Cloud ADM

Navigate toCloud based ADM Account - subscriptions- auto licenses , ensure if it is disabled, else disable it and rediscover ADC instances to get the auto licenses turn off...

PT-2023-8891

Name of the Vulnerable Software and Affected Versions Ray versions affected versions not specified Description The issue exists due to the lack of neutralization of special elements used in operating system commands. This allows a remote attacker to execute arbitrary commands using specially...

PT-2023-27075 · Icewarp · Icewarp Mail Server

Name of the Vulnerable Software and Affected Versions: IceWarp Mail Server version 10.4.5 Description: The issue is related to a local file inclusion LFI vulnerability. It affects the /calendar/minimizer/index.php component, allowing attackers to include or execute files from the local file syste...

PT-2023-27483 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specific flaw...