PT-2025-13825 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue concerns a stack-based buffer overflow in the M-SEARCH Host header of the UPNP service, located at /usr/sbin/upnp. Recommendations: For Netgear WNR854T version 1.5.2, consider disabling the...

CVE-2024-8001 VIWIS LMS Print authorization

A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. A user with the role learner can use the administrative...

PT-2024-33129 · Abb · Abb Drive Composer

Name of the Vulnerable Software and Affected Versions: DotNetZip versions 1.16.0 and earlier ABB Drive Composer versions prior to 2.9.1 Description: The issue allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component. This affects products that are no...

PT-2024-20849 · Superscan · Superscan

Name of the Vulnerable Software and Affected Versions: SuperScan version 4.1 Description: A buffer overflow issue was discovered in SuperScan, which occurs via the Hostname/IP parameter. This issue grants an attacker full control. Recommendations: For SuperScan version 4.1, patch immediately and...

PT-2024-16639 · Eclipse +2 · Eclipse Openj9 +2

Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions up to 0.47 Description: The JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From version 0.48, the value is correct but may be truncated to include a smaller number of characters...

CVE-2024-10443

creationtimestamp| type| source ---|---|--- 2024-11-05 09:34:00+00:00| seen| https://thehackernews.com/2024/11/synology-urges-patch-for-critical-zero.html 2024-11-05 10:37:25+00:00| seen| https://t.me/thehackernews/5832 2024-11-05 15:11:45+00:00| published-proof-of-concept|...

PT-2024-35735 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: A heap-buffer-overflow issue was discovered in the SkipSpacesAndLineEnd function. This occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application cras...

Amazon Linux AMI : kernel (ALAS-2024-1951)

The version of kernel installed on the remote host is prior to 4.14.350-188.564. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1951 advisory. A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function...

PT-2024-34570 · Eladmin · Eladmin

Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. The manipulation of the HTTP Body ip parameter leads to SSRF. This occurs in the ServerDeployController.java file. Recommendations: Fo...

PT-2024-9377

Name of the Vulnerable Software and Affected Versions: CyberPanel versions through 2.3.6 and unpatched 2.3.7 Description: The issue is related to the upgrademysqlstatus function in CyberPanel, which has inadequate authentication procedures. This allows a remote attacker to bypass authentication a...

PT-2024-33100 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tours and Travels Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability. This vulnerability can be exploited via a crafted payload to the val-email parameter in the forget...

PT-2024-39928 · 07Flycrm +1 · 07Flycrm +1

Name of the Vulnerable Software and Affected Versions: 07FLYCMS versions up to 1.2.0 07FLY-CMS versions up to 1.2.0 07FlyCRM versions up to 1.2.0 Description: A critical vulnerability was found in the affected products, which affects the pictureUpload function of the file /admin/File/pictureUploa...

PT-2024-39927 · 07Flycrm +1 · 07Flycrm +1

Name of the Vulnerable Software and Affected Versions: 07FLYCMS versions up to 1.2.0 07FLY-CMS versions up to 1.2.0 07FlyCRM versions up to 1.2.0 Description: A critical vulnerability has been found in the affected products, affecting the fileUpload function of the file /admin/File/fileUpload. Th...

PT-2025-28387 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue is related to an out-of-bounds read in the decoding frame header in libsavsvc.so. This allows local attackers to cause memory corruption. Recommendations: For Android versions prior to 15,...

PT-2025-28386 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue is related to out-of-bounds writing when accessing uninitialized memory in libsavsvc.so. This allows local attackers to cause memory corruption. Recommendations: For Android versions prior t...

PT-2024-38043 · Unknown · Open-Webui

Name of the Vulnerable Software and Affected Versions: open-webui version v0.3.8 Description: The issue is related to improper privilege management in the API endpoints "GET /api/v1/documents/" and "POST /rag/api/v1/doc". This allows a lower-privileged user to access and overwrite files managed b...

PT-2024-17126

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.8 Wireshark versions 4.4.0 through 4.4.1 Description The issue allows for denial of service via packet injection or crafted capture file. It is related to the ECMP dissector crash in Wireshark...

PT-2024-31846 · Solvait · Solvait

Name of the Vulnerable Software and Affected Versions: Solvait version 24.4.2 Description: A security flaw has been discovered that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in "/AssignToMe/SetAction" API endpoint, an attacker can...

PT-2024-29431 · Cadclick · Cadclick

Name of the Vulnerable Software and Affected Versions: CADClick versions 1.11.0 and earlier Description: A reflected cross-site scripting XSS vulnerability is present in "Artikel.aspx" in CADClick, allowing remote attackers to inject arbitrary web script or HTML via the searchindex parameter. Thi...

PT-2024-20280 · Ruijie · Ruijie Rg-Nbs2009G-P Rgos

Name of the Vulnerable Software and Affected Versions: Ruijie RG-NBS2009G-P RGOS version 10.41P2 Release 9736 Description: The issue allows a remote attacker to gain privileges via the login check state component. This is due to an Insecure Permissions vulnerability. A remote attacker can exploit...