PT-2022-5389 · Bash +6 · Bash +6

Name of the Vulnerable Software and Affected Versions: bash affected versions not specified Description: The issue is related to a heap-buffer overflow in the valid parameter transform function of the bash package, which can lead to memory problems. This can potentially allow a remote attacker to...

PT-2022-5520 · Microsoft · Windows Dhcp Client +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Client affected versions not specified Description: The issue is related to insecure privilege management in the Windows DHCP client, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...

PT-2022-13036 · Vdsm · Vdsm

Name of the Vulnerable Software and Affected Versions: vdsm affected versions not specified Description: A race condition was found in the functionality to obfuscate sensitive values in log files, which may lead to values being stored in clear text. Recommendations: At the moment, there is no...

PT-2022-2981 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in the Windows operating system, specifically due to insufficient input validation. This allows ...

PT-2022-1722 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions affected versions not specified Description: The issue is related to privilege management errors in the browser, which can allow an attacker to execute arbitrary code. Recommendations: At the moment, the...

PT-2022-10619 · Huawei · Hisuite

Name of the Vulnerable Software and Affected Versions: Hisuite module affected versions not specified Description: The issue is related to an External Control of System or Configuration Setting vulnerability. Successful exploitation of this vulnerability may lead to a Firmware leak...

Cross-Site Request Forgery (CSRF) in flatcore/flatcore-cms

Description 1 Missing CSRF token in delete posts and delete folder in the frontend 2 Missing backend CSRF validation in 1 removing and enabling fix status and 2 deleting posts, and 3 delete folder and 4 delexclude in the indexing page see Permalinks 3 Delete cache Proof of Concept Open in...

serverless: incomplete fix for CVE-2021-27918 / CVE-2021-31525 / CVE-2021-33196

CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed for Serverless 1.16.0 and Serverless client kn 1.16.0...

PT-2021-6283 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. This can affect the system, potentially leading to unauthorized...

PT-2021-3300 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of access control in the Windows kernel-mode driver, allowing an attacker to elevate their privileges. This could potentially impact system security...

PT-2021-5151 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a double free privilege escalation vulnerability in the Linux Kernel Bluetooth CMTP module. This vulnerability allows local attackers to escalate privileges on...

PT-2021-14892 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.4 and later Description: An issue has been discovered in GitLab, where improper access control allows unauthorized users to access details on analytic pages. Recommendations: For versions 13.4 and later, update to a version...

PT-2020-3837 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Engine improperly handles memory. To exploit this, an attacker would first...

PT-2020-3940 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This could allow an attacker to execute...

PT-2020-11908 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.7 through 12.8.1 Description: The issue involves insecure permissions under certain conditions, specifically when changes to project authorization within groups were not being applied as expected. Recommendations: For GitLa...

PT-2017-6400 · Imagemagick · Imagemagick

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue in ImageMagick allows remote attackers to have an unspecified impact via a crafted xpm file. This is related to the coders/xpm.c component. Recommendations: At the moment, the...

PT-2016-7175 · Alt Linux +2 · Alt Linux +2

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but specific details are not provided. Recommendations: At the moment, there is no information about...

WP Popup <= 1.3 - XSS & CSRF

It is unclear if the issues have been fixed. Plugin has been closed...

InterWorx Control Panel 5.0.13 build 574 - xhr.php?i SQL Injection

InterWorx Control Panel 5.0.13 build 574 - xhr.php?i SQL Injection ================================================= Title: SQL injection in InterWorx Control Panel Product: InterWorx Web Control Panel Vendor: InterWorx LLC Tested Version: 5.0.13 build 574 Vulnerability Type: SQL Injection CWE-89...

PBX Phone System v2.x - Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ PBX Phone System v2.x - Multiple Vulnerabilities ================================================ PenTest Information: ==================== Global-Evolution Security Team remove discover...