PT-2023-31452 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function formUpgradeMeshOnline. Recommendations: For Tenda W30E version 16.01.0.124843, consider disabling the formUpgradeMeshOnline function until a...

PT-2023-31187 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The issue is related to the /admin/slide/delete API endpoint. This allows for unauthorized actions to be performed on the application...

PT-2023-9103 · Peplink · Peplink Smart Reader

Name of the Vulnerable Software and Affected Versions: Peplink Smart Reader version 1.2.0 Description: A data integrity vulnerability exists in the web interface /cgi-bin/upload config.cgi functionality. A specially crafted HTTP request can lead to configuration modification. An attacker can make...

PT-2023-9821 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a use-after-free error when handling Doc objects, which can allow an attacker to execute arbitrary code usi...

PT-2023-32542 · Dev Blog · Dev Blog

Name of the Vulnerable Software and Affected Versions: Dev blog version 1.0 Description: The issue allows for an account takeover through the user cookie, enabling an attacker to access any user's session by knowing their username. Recommendations: For Dev blog version 1.0, consider disabling the...

PT-2023-7288 · Unknown · Weston Embedded Uc-Http

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-HTTP version 3.01.01 Description: A memory corruption issue exists in the HTTP Server header parsing functionality. This can be exploited by sending specially crafted network packets, potentially leading to code execution. ...

PT-2023-30696

Name of the Vulnerable Software and Affected Versions CesiumJS version 1.111 Description A cross-site scripting XSS vulnerability allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to "/container files/public html/doc/index.html". The...

PT-2023-29576 · Unknown · Yasukawa Memberscard

Name of the Vulnerable Software and Affected Versions: Yasukawa memberscard version 13.6.1 Description: An issue in the software allows attackers to send crafted notifications via leakage of the channel access token. This can potentially lead to unauthorized access and manipulation of user...

PT-2023-30687 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/task/run component. This allows for unauthorized actions to be performed on behalf of an authenticated user. Recommendations: For...

PT-2023-32415 · Unknown · Lissy93 Dashy

Name of the Vulnerable Software and Affected Versions: Lissy93 Dashy version 2.1.1 Description: A critical vulnerability has been found in Lissy93 Dashy, affecting an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config lead...

CVE-2023-46723 lte-pic32-writer's sendto.txt may disclose URL and the API key

lte-pic32-writer is a writer for PIC32 devices. In versions 0.0.1 and prior, those who use sendto.txt are vulnerable to attackers who known the IMEI reading the sendto.txt. The sendto.txt file can contain the SNSsuch as slack and zulip URL and API key. As of time of publication, a patch is not ye...

CVE-2023-46723 lte-pic32-writer's sendto.txt may disclose URL and the API key

lte-pic32-writer is a writer for PIC32 devices. In versions 0.0.1 and prior, those who use sendto.txt are vulnerable to attackers who known the IMEI reading the sendto.txt. The sendto.txt file can contain the SNSsuch as slack and zulip URL and API key. As of time of publication, a patch is not ye...

PT-2023-18086 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-32368 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue affects some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the id argument leads to sql injection. The attack may be launched...

PT-2023-6898 · D Link · D-Link Dar-7000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 version V31R02B1413C Description: The issue is related to a SQL injection vulnerability in the editrole.php component, which can be exploited by a remote attacker to obtain sensitive information and execute arbitrary code. Thi...

PT-2023-32319 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA version 2017 11.10 Description: A critical vulnerability was found in Tongda OA, affecting the file general/system/approve center/flow guide/flow type/set print/delete.php. The manipulation of the DELETE STR argument leads to SQL...

PT-2023-6447 · Tp Link · Tp-Link Tl-Wdr7660 +1

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin TP-LINK TL-WDR7660 version 2.0.30 Description: The issue is related to a stack overflow via the deviceInfoRegister function, which can be exploited by a remote attacker to execu...

PT-2023-21348 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.14884.0 Description: An issue in IXP Data Easy Install allows local attackers to gain escalated privileges via weak encoding of sensitive information. Recommendations: For version 6.6.14884.0, consider...

PT-2023-24876 · Baker Hughes · Bently Nevada 3500 System Tdi Firmware

Name of the Vulnerable Software and Affected Versions: Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 Description: The issue concerns a vulnerability in the password retrieval functionality, which could allow an attacker to access passwords stored on the device. Recommendation...

PT-2023-5887 · D Link · D-Link D-View

Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. The specific flaw exists within the shutdown coreserver action,...