PT-2023-22129 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2023 through 2024 Description: A maliciously crafted CATPART file can cause an Out-Of-Bounds Write when parsed through the software. This can be leveraged by a malicious actor to cause a crash, read sensitive data, o...

Mac Workspace error "This store doesn't exist. Please retry or contact support"

After plugging-in Gateway URL on Mac Workspace and entering credentials, Workspace prompt error "This store doesn't exist. Please retry or contact support"...

PT-2023-25263 · Unknown · Mtpproperty

Name of the Vulnerable Software and Affected Versions: MtpProperty affected versions not specified Description: The issue is related to an out of bounds read in MtpPropertyValue of MtpProperty.h due to uninitialized data. This could lead to local information disclosure with no additional executio...

PT-2023-28239 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-25266 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the eatt l2cap reconfig completed function of eatt impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to...

Information disclosure

In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07978550; Issue ID: ALPS07978550...

CVE-2023-32812

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365...

CVE-2023-20834

In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID: ALPS07608514...

CVE-2023-20832

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530...

CVE-2023-20826

In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07978550; Issue ID: ALPS07978550...

PT-2023-26494 · Realwebcare · Realwebcare Wrc Pricing Tables

Name of the Vulnerable Software and Affected Versions: Realwebcare WRC Pricing Tables plugin versions prior to 2.3.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Realwebcare WRC Pricing Tables plugin. This vulnerability requires...

SUSE CVE-2023-40576

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it...

PT-2023-26164 · Unknown · Chop-Chop Coming Soon Chop Chop

Name of the Vulnerable Software and Affected Versions: Chop-Chop Coming Soon Chop Chop plugin versions 2.2.4 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-4665 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue is related to an Out-Of-Bounds Read in the nsc rle decompress data function. This occurs because the function processes context-Planes without...

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26255 CVE-2023-26256 POC...

PT-2023-23843 · WordPress · Rolf Van Gelder Order Your Posts Manually

Name of the Vulnerable Software and Affected Versions: Rolf van Gelder Order Your Posts Manually plugin versions 2.2.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...

PT-2023-23830 · WordPress · Bill Minozzi Block Bad Bots/Stop Bad Bots Crawlers/Spiders/Anti Spam Protection

Name of the Vulnerable Software and Affected Versions: Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin versions prior to 7.32 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Bill Minozzi Block...

PT-2023-12934 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.4.0 through 5.4.2 Description: The issue is related to a use after free in the r reg get name idx function. Recommendations: For versions 5.4.0 and 5.4.2, update to a version that fixes the use after free issue in the r reg...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

PT-2023-28584 · WordPress · User Activity Log

Name of the Vulnerable Software and Affected Versions: User Activity Log WordPress plugin versions prior to 1.6.7 Description: The issue allows an attacker to manipulate the client IP address value retrieved by the plugin, potentially hiding the source of malicious traffic. This is due to the...