PT-2024-25726 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the processing of the file admin/saveeditt.php, where the manipulation of the contact argument leads to sql injection. The attack can be initiated...

PT-2024-23633

Name of the Vulnerable Software and Affected Versions codesiddhant Jasmin Ransomware version 1.0.1 Description The issue allows an attacker to obtain sensitive information via the download file.php component due to a Directory Traversal vulnerability. This vulnerability can be exploited to access...

PT-2024-25379 · Unknown · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting some unknown functionality of the file admin/books/controller.php. The manipulation of the IBSN...

PT-2024-25284 · Sourcecodester · Aplaya Beach Resort Online Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file admin/mod roomtype/index.php. The manipulation of the id argument leads to S...

PT-2024-3859 · Cisco · Cisco Nexus Dashboard

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: The issue is related to insufficient access controls on a specific API endpoint, allowing a remote attacker to gain unauthorized access to protected information by sending...

PT-2024-23720 · Wuzhicms · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHICMS version 4.1.0 Description: An issue was discovered in WUZHICMS, allowing an attacker to execute arbitrary code and obtain sensitive information via the "index.php" file. Recommendations: For WUZHICMS version 4.1.0, consider disabling...

PT-2024-24112 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: A critical issue has been found in the processing of the file dede/makehtml archives action.php, leading to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

PT-2024-2465 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a stack overflow vulnerability in the fromAddressNat function, specifically in the page parameter. This vulnerability can be exploited by a remote attacker using a speciall...

PT-2024-23179 · Unknown · Code-Projects Online Book System

Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical issue has been found in the processing of the file /Product.php, where the manipulation of the argument value leads to sql injection. The attack may be initiated remotely. T...

PT-2024-23094 · Unknown · Sentrifugo

Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: The issue is related to a SQL injection vulnerability. It could allow a remote user to send a specially crafted query to the server and extract all the data from it. The vulnerability is exploited through t...

PT-2024-21991 · Unknown · Campcodes Complete Online Beauty Parlor Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Beauty Parlor Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/admin-profile.php. The manipulation of the adminname argument...

PT-2024-20773 · Unknown · Magesh-K21 Online-College-Event-Hall-Reservation-System

Name of the Vulnerable Software and Affected Versions: MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description: A critical vulnerability was found in the system, affecting an unknown functionality of the file /login.php. The manipulation of the email argument leads to SQL...

PT-2024-1988 · Elinksmart · Esmartcam

Name of the Vulnerable Software and Affected Versions: Elink Smart eSmartCam application version 2.1.5 Description: The issue is related to the use of hardcoded AES encryption keys in the application, which can be extracted from a binary file. This allows an attacker who can observe packet data,...

PT-2024-12770 · Multilaser · Multilaser Re160

Name of the Vulnerable Software and Affected Versions: Multilaser RE160 firmware versions 5.07.51 pt MTL01 through 5.07.52 pt MTL01 Description: The issue allows attackers to bypass access control and gain complete access to the application by supplying a crafted cookie. This enables attackers to...

PT-2024-20942 · Public Knowledge · Pkp Ojs

Name of the Vulnerable Software and Affected Versions: Pkp Ojs version 3.3 Description: A cross-site scripting XSS issue in the Production module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...

PT-2024-2012 · Dell · Idrac8

Name of the Vulnerable Software and Affected Versions: Dell Integrated Remote Access Controller 8 iDRAC8 affected versions not specified Description: A command injection vulnerability exists in local RACADM, which is related to incorrect input validation. This issue can be exploited by a maliciou...

PT-2024-18044 · Unknown · Jordy Meow Media Alt Renamer

Name of the Vulnerable Software and Affected Versions: Jordy Meow Media Alt Renamer versions 0.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject...

PT-2024-20843 · Unknown · Niushop B2B2C

Name of the Vulnerable Software and Affected Versions: Niushop B2B2C V5 Description: The issue concerns a SQL Injection vulnerability in the orderGoodsDelivery function, allowing attackers to execute arbitrary SQL commands via the order id parameter. Recommendations: For Niushop B2B2C V5, as a...

PT-2024-18275 · Unknown · Temmokumvc

Name of the Vulnerable Software and Affected Versions: TemmokuMVC versions up to 2.3 Description: A critical issue was found in the function get img url/img replace in the library lib/images get down.php of the component Image Download Handler. The manipulation leads to deserialization. It is...

PT-2024-13238 · Unknown · Weston Embedded Uc-Http

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-HTTP version 80d4004 Description: A heap-based buffer overflow vulnerability exists in the HTTP Server functionality. A specially crafted network packet can lead to arbitrary code execution. An attacker can send a malicious...