CVE-2023-20826

In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07978550; Issue ID: ALPS07978550...

PT-2023-26494 · Realwebcare · Realwebcare Wrc Pricing Tables

Name of the Vulnerable Software and Affected Versions: Realwebcare WRC Pricing Tables plugin versions prior to 2.3.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Realwebcare WRC Pricing Tables plugin. This vulnerability requires...

SUSE CVE-2023-40576

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it...

PT-2023-26164 · Unknown · Chop-Chop Coming Soon Chop Chop

Name of the Vulnerable Software and Affected Versions: Chop-Chop Coming Soon Chop Chop plugin versions 2.2.4 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-4665 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue is related to an Out-Of-Bounds Read in the nsc rle decompress data function. This occurs because the function processes context-Planes without...

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26255 CVE-2023-26256 POC...

PT-2023-23843 · WordPress · Rolf Van Gelder Order Your Posts Manually

Name of the Vulnerable Software and Affected Versions: Rolf van Gelder Order Your Posts Manually plugin versions 2.2.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...

PT-2023-23830 · WordPress · Bill Minozzi Block Bad Bots/Stop Bad Bots Crawlers/Spiders/Anti Spam Protection

Name of the Vulnerable Software and Affected Versions: Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin versions prior to 7.32 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Bill Minozzi Block...

PT-2023-12934 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.4.0 through 5.4.2 Description: The issue is related to a use after free in the r reg get name idx function. Recommendations: For versions 5.4.0 and 5.4.2, update to a version that fixes the use after free issue in the r reg...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

PT-2023-28584 · WordPress · User Activity Log

Name of the Vulnerable Software and Affected Versions: User Activity Log WordPress plugin versions prior to 1.6.7 Description: The issue allows an attacker to manipulate the client IP address value retrieved by the plugin, potentially hiding the source of malicious traffic. This is due to the...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in jerryscript version v.3.0.0, which stems from the presence of a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the...

ThinManager Path Traversal (CVE-2023-2917) Arbitrary File Upload

This module exploits a path traversal vulnerability CVE-2023-2917 in ThinManager use auxiliary/admin/networking/thinmanager/traversalupload2 msf undefinedtraversalupload2 show actions ...actions... msf undefinedtraversalupload2 set ACTION msf undefinedtraversalupload2 show options ...show and set...

Out-of-bounds

In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21264

In multiple functions of memprotect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2023-18021 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the LockSettingsActivity.java file, allowing a new lockscreen PIN to be set without entering the existing PIN. This could lead to local...

PT-2023-18051 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the parseInputs function of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local...

CVE-2023-20797

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582...

Out-of-bounds

In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608433; Issue ID: ALPS07608433...

Memory corruption

In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818...