PT-2024-29446 · Minecraft · Justenoughitems

Name of the Vulnerable Software and Affected Versions: JustEnoughItems JEI versions 19.5.0.33 and before Description: The issue is related to an Improper Validation of Specified Index, Position, or Offset in Input, specifically a failure to validate slot index in JEI for Minecraft. This allows...

PT-2024-8672 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 15.11.0.20 Description: A critical issue has been found in the Tenda G3, affecting the formSetDebugCfg function of the file /goform/setDebugCfg. The manipulation of the enable/level/module argument leads to a stack-based buff...

PT-2024-11620 · Teldats · Teldats Router

Name of the Vulnerable Software and Affected Versions: Teldats Router versions RS123, RS123w Description: The issue allows an attacker to execute arbitrary code via the cmdcookie parameter to the "upgrade/query.php" page. This enables the attacker to perform Cross Site Scripting attacks...

PT-2024-8680 · Unknown · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: The issue is related to bypassing the authentication procedure in the MicroSCADA X SYS600 system. An attacker with local access to the machine where MicroSCADA X SYS600 is...

PT-2024-6435 · Tenda · Tenda O1

Name of the Vulnerable Software and Affected Versions: Tenda O1 version 1.0.0.710648 Description: A critical vulnerability has been found in the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. This issue can be...

PT-2024-30184 · Exiftags +1 · Exiftags +1

Name of the Vulnerable Software and Affected Versions: exiftags version 1.01 Description: A Buffer Overflow vulnerability in exiftags allows a local attacker to execute arbitrary code via the paresetag function. This issue enables local code execution. Recommendations: For exiftags version 1.01, ...

PT-2024-38882 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical vulnerability was found in SourceCodester Music Gallery Site. This issue affects unknown code of the file /classes/Master.php?f=delete category. The manipulation of the id...

PT-2024-6436 · Tenda · Tenda O1

Name of the Vulnerable Software and Affected Versions: Tenda O1 version 1.0.0.710648 Description: A critical issue affects the fromDhcpSetSer function of the file /goform/DhcpSetSer, allowing a remote attacker to exploit a stack-based buffer overflow vulnerability. The manipulation of the argumen...

PT-2024-31255 · Gazelle · Gazelle

Name of the Vulnerable Software and Affected Versions: Gazelle version 63b3370 Description: A cross-site scripting XSS issue in the /managers/enable requests.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the view parameter...

PT-2024-31179 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the adv.iptv.stballvlans parameter in the setIptvInfo function. This allows for potential exploitation. No information is provided about the estimated...

PT-2024-31177 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.stb.mode parameter in the formGetIptv function. This allows for potential exploitation. No information is provided about the estimated number of...

PT-2024-31178 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.city.vlan parameter in the setIptvInfo function. This allows for potential exploitation. No information is provided about the estimated number of...

PT-2024-38850

Name of the Vulnerable Software and Affected Versions: Chengdu Everbrite Network Technology BeikeShop versions up to 1.5.5 Description: A problematic issue was found in BeikeShop, affecting the exportZip function of the file /admin/file manager/export. The manipulation of the path argument leads ...

PT-2024-31172 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that can occur via the iptv.stb.port parameter in the formGetIptv function. This poses a risk of remote code execution. Recommendations: For Tenda AX1806 version 1.0.0.1,...

PT-2024-30160 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/music/ajax.php?action=save music" endpoint, allowing remote attackers to execute arbitrary code via the title and artist...

PT-2024-31175 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.city.vlan parameter in the formGetIptv function. This allows for potential exploitation. Recommendations: For Tenda AX1806 version 1.0.0.1, as a...

PT-2024-31254 · Unknown · Picuploader

Name of the Vulnerable Software and Affected Versions: PicUploader version fcf82ea Description: A cross-site scripting XSS issue exists in the /auth/AzureRedirect.php component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error description...

PT-2024-31180 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.mode parameter in the setIptvInfo function. This allows for potential exploitation. Recommendations: For Tenda AX1806 version...

PT-2024-31512 · Byob · Byob

Name of the Vulnerable Software and Affected Versions: BYOB Build Your Own Botnet version 2.0 Description: An arbitrary file write issue in the exfiltration endpoint allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted...

PT-2024-38820 · D Link · Dns-320L +18

Name of the Vulnerable Software and Affected Versions: D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 up to 20240814 Description: A...