EUVD-2024-38503

Malicious code in bioql PyPI...

CVE-2024-40531

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

CVE-2024-40530

A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header...

PT-2024-28901 · Unknown · Pantera Crm

Name of the Vulnerable Software and Affected Versions: Pantera CRM versions 401.152 through 402.072 Description: A mass assignment issue exists, allowing authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

UAB Pantera CRM 安全漏洞

UAB Pantera CRM is a tool and information management system from UAB Pantera. A security vulnerability exists in UAB Pantera CRM version v.401.152 and v.402.072, which stems from an insecure privilege vulnerability allows remote attackers to execute arbitrary code by modifying the header componen...

UAB Pantera CRM 安全漏洞

UAB Pantera CRM is a tool and information management system from UAB Pantera. A security vulnerability exists in UAB Pantera CRM versions v.401.152 and v.402.072, which originated from a vulnerability that allows remote attackers to elevate privileges via the user profile management feature...

pantera.de Cross Site Scripting vulnerability OBB-2656198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Unfixed XSS vulnerability at www.rentabiliweb.com

Security researcher PanterA, has submitted on 18/11/2009 a cross-site-scripting XSS vulnerability affecting www.rentabiliweb.com, which at the time of submission ranked 64726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

Unfixed XSS vulnerability at indicateurs.education.gouv.fr

Security researcher PanterA, has submitted on 08/04/2009 a cross-site-scripting XSS vulnerability affecting indicateurs.education.gouv.fr, which at the time of submission ranked 11827 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. ...