PT-2022-23466 · Seiko · Seiko Skybridge Mb-A100/A110

Name of the Vulnerable Software and Affected Versions: Seiko SkyBridge MB-A100/A110 versions 4.2.0 and below Description: The issue allows attackers to execute arbitrary code via a crafted html file, exploiting an arbitrary file upload vulnerability through the restore backup function...

PT-2022-23417 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function addactionlist. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the addactionlist function until a...

Clickjacking Leads To User Deletion

Hello team, on notrinoserp there is no clickjacking protection implemented x-frame-options, so an attacker can perform clickjacking attack, and in this case im able to delete user account via this vulnerability from the admin account, here is the POC: Exploit Script: iframe position:relative;...

PT-2022-22491 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes the fix for the issue in commit 8abf6be Description: A floating-point exception issue was discovered in PNGDec, specifically in the SaveBMP function located at /linux/main.cpp. Recommendations...

PT-2022-24300 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A floating point exception FPE was discovered in XPDF via the DCTStream::decodeImage function at /xpdf/Stream.cc. Recommendations: For XPDF version ffaf11c, consider applying a patch or fix to resolve the...

PT-2022-16776 · Intelbras · Intelbras Ata 200

Name of the Vulnerable Software and Affected Versions: INTELBRAS ATA 200 Firmware version 74.19.10.21 Description: The issue is an authenticated stored cross-site scripting XSS vulnerability in the "Field Server Address" field. This allows attackers to inject JavaScript code through a crafted...

PT-2022-7340 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A memory leak issue was found in the Linux Kernel, specifically in the rlb arp xmit function of the drivers/net/bonding/bond alb.c file, which is part of the IPsec component. This issu...

PT-2022-14497 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is...

PT-2022-22607 · Unknown · Tscancode Tsclua

Name of the Vulnerable Software and Affected Versions: TscanCode tsclua version 2.15.01 Description: A vulnerability in the lua parser of TscanCode tsclua allows attackers to cause a Denial of Service DoS via a crafted lua script. Recommendations: For TscanCode tsclua version 2.15.01, consider...

PT-2022-22463 · Percona · Percona Server For Mysql

Name of the Vulnerable Software and Affected Versions: Percona Server for MySQL version 8.0.28-19 Description: An issue in the fetch step function allows attackers to cause a Denial of Service DoS via a SQL query. Recommendations: For Percona Server for MySQL version 8.0.28-19, consider disabling...

PT-2022-20569 · Sourcegraph · Sourcegraph

Name of the Vulnerable Software and Affected Versions: Sourcegraph versions prior to 3.42 Description: The issue allows an authenticated Sourcegraph user to edit Code Monitors owned by any other Sourcegraph user, including editing the trigger and action of the monitor. However, an attacker cannot...

PT-2022-10248

Name of the Vulnerable Software and Affected Versions NASM version 2.16rc0 Description An issue was discovered in the NASM software, specifically memory leaks in the nasm malloc function located in nasmlib/alloc.c. Recommendations For NASM version 2.16rc0, consider restricting the use of the nasm...

PT-2022-22589 · Joplin · Joplin

Name of the Vulnerable Software and Affected Versions: Joplin version 2.8.8 Description: The issue allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles. Recommendations: For Joplin version 2.8.8, consider restricting the injection of crafted payloads...

Application allows large characters to insert in the input field "Add new table" on the create field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in

Proof of Concept Go to http://localhost:8080/dashboard//projects Select any created project and go to the project section. Click on the "ADD/IMPORT" section and click on "add new table" Create Fill the "table name" field with huge characters, more than 1 lakh Copy the below payload and put it in...

PT-2022-4253

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1 Oracle GraalVM Enterprise Edition versions 20.3.6, 21.3.2, 22.1.0 Description The issue is related to insufficient input validation in the Hotspot component. It allows an...

PT-2022-15472 · Ibm · Ibm Spectrum Protect Operations Center

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Operations Center versions 8.1.0.000 through 8.1.14 Description: The issue allows a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information...

CVE-2017-20110 Teleopti WFM Administration Credentials information disclosure

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure Credentials. The attack may be launched remotely...

CVE-2014-125025

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decodepulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue...

Memory corruption

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodenalunit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix thi...

CVE-2014-125024 FFmpeg lag_decode_frame memory corruption

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lagdecodeframe. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...