PT-2024-24477 · Yonganda · Yad-Loj

Name of the Vulnerable Software and Affected Versions: Yonganda YAD-LOJ version 3.0.561 Description: The issue allows a remote attacker to cause a denial of service via a crafted packet. There is no information available about the estimated number of potentially affected devices worldwide or...

PT-2024-25660 · O Ran · O-Ran Ricapp Kpimon-Go

Name of the Vulnerable Software and Affected Versions: O-RAN RICAPP kpimon-go I-Release affected versions not specified Description: The issue is related to a segmentation violation that occurs via a certain E2AP-PDU message. Recommendations: At the moment, there is no information about a newer...

PT-2024-14213 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Centreon. User interaction is required to exploit this issue. The specific flaw exists within the...

PT-2024-20718 · Ibm · Ibm Mq Appliance

Name of the Vulnerable Software and Affected Versions: IBM MQ Appliance versions 9.3 CD and LTS Description: The issue is caused by improper bounds checking, leading to a heap-based buffer overflow. A remote authenticated attacker could overflow a buffer, potentially executing arbitrary code on t...

CVE-2024-32880 pyLoad allows upload to arbitrary folder lead to RCE

pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution. There is no fix available at the time of publication...

PT-2024-29472 · Skylab · Skylab Igx Iiot Gateway

Name of the Vulnerable Software and Affected Versions: Skylab IGX IIoT Gateway affected versions not specified Description: The Skylab IGX IIoT Gateway has a security issue where the limited shell terminal process runs under root privileges, allowing an attacker to read, write, and modify any fil...

PT-2024-14884 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: A flaw has been discovered that allows for remote code execution on the camera. An attacker could inject malicious code into HTTP request packets to execute arbitrary code. The estimated...

PT-2024-26308 · Bombastic · Bombastic

Name of the Vulnerable Software and Affected Versions: Bombastic affected versions not specified Description: A flaw was found in Bombastic, allowing authenticated users to upload compressed bzip2 or zstd SBOMs. The API endpoint verifies the presence of some fields and values in the JSON. To...

PT-2024-12074 · WordPress · Shoaib Saleem Wp Post Rating

Name of the Vulnerable Software and Affected Versions: Shoaib Saleem WP Post Rating versions through 2.5 Description: The issue is related to a Missing Authorization vulnerability, which allows for Functionality Misuse in Shoaib Saleem WP Post Rating. Recommendations: For versions through 2.5,...

PT-2024-24869 · WordPress · Wp Fusion Lite

Name of the Vulnerable Software and Affected Versions: WP Fusion Lite versions 3.42.10 and earlier Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For WP Fusion Lite versions 3.42.10 and...

PT-2024-40491 · Cg · Cg

Name of the Vulnerable Software and Affected Versions: cg affected versions not specified Description: A vulnerability has been discovered in the handling of the referrer header in the application, which could allow an attacker to conduct open redirects. The issue arises from improper validation ...

PT-2024-4594 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and SAP NetWeaver ABAP affected versions not specified Description: The issue is related to an uncontrolled consumption of resources, which can be exploited by a remote attacker to cause a denial of service. This can lea...

PT-2024-40005 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma affected versions not specified Description: The issue allows access to the platform despite authentication being enabled, as previously logged-in sessions remain valid. The expected behavior is that all previously connected...

PT-2024-24238 · Italtel · Italtel Embrace

Name of the Vulnerable Software and Affected Versions: Italtel Embrace version 1.6.4 Description: An issue was discovered where the web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary files on the filesystem. Recommendations: For Italtel Embrace...

PT-2024-24675 · Knight · Knight Lab Timeline

Name of the Vulnerable Software and Affected Versions: Knight Lab Timeline versions 3.9.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-19258 · Electrolink · Compact Dab Transmitter +6

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The issue allows an attacker to perform an unauthenticated parameter manipulation. This manipulation enables the attacker to set credentials to blank, thereby gaining access to the admi...

PT-2024-27537 · Electrolink · Electrolink Transmitters

Name of the Vulnerable Software and Affected Versions: Electrolink transmitters affected versions not specified Description: The issue concerns Electrolink transmitters storing credentials in clear-text, which could allow an attacker to access the system using these credentials. Recommendations: ...

PT-2024-3090 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android Chromium-based affected versions not specified Description: The issue is related to errors in handling files, specifically cookies, which can allow a remote attacker to gain unauthorized access to protected...

PT-2024-22788 · Openasp · Openasp

Name of the Vulnerable Software and Affected Versions: OpenRASP affected versions not specified Description: The issue is related to a reflected Cross-Site Scripting XSS in the /login page, caused by the reflection of the redirect parameter. This allows an attacker to execute arbitrary javascript...

PT-2024-24775 · WordPress · Genialsouls Wp Social Comments

Name of the Vulnerable Software and Affected Versions: GenialSouls WP Social Comments versions 1.7.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in GenialSouls WP Social Comments. Recommendations: For GenialSouls WP Social Comments versions 1.7.3 and...