PT-2023-17435 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue affects the processing of the file "/author/list?limit=10&offset=0&order=desc". The manipulation of the sort argument leads to SQL injection. This issue can be exploited remotely...

PT-2023-20789 · Unknown · Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: Sales Tracker Management System version 1.0 Description: An issue in the Sales Tracker Management System allows a remote attacker to access sensitive information via the "admin/reports" endpoint, specifically through the sales.php component...

PT-2023-15503 · Redgate · Redgate Sql Monitor

Name of the Vulnerable Software and Affected Versions: Redgate SQL Monitor version 12.1.31.893 Description: A Cross Site Scripting XSS issue in the web SQL monitor login page allows remote attackers to inject arbitrary web script or HTML via the returnUrl parameter. This enables attackers to...

PT-2023-20467 · Mcubo Ict · Mcubo Ict

Name of the Vulnerable Software and Affected Versions: MCUBO ICT versions 6.0.2 through 10.12.4 Description: An issue in the login web page of the affected software can lead to an Observable Response Discrepancy. This discrepancy occurs because the web application provides different responses to...

PT-2023-5119 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a buffer overflow read in the hostapd.cpp component of the Android operating system. This could lead to local information disclosure with System execution privileges needed, and...

PT-2023-19781 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: churchcrm version 4.5.3 Description: The issue is related to a SQL injection vulnerability. It occurs via the Event parameter at the "/churchcrm/EventAttendance.php" API endpoint. Recommendations: For churchcrm version 4.5.3, consider...

PT-2023-7479 · Unknown · Osprey Pump Controller

Name of the Vulnerable Software and Affected Versions: Osprey Pump Controller version 1.01 Description: The issue exists due to insufficient input validation in the software of Osprey Pump Controller, allowing a remote attacker to gain unauthorized access to the device. This vulnerability could...

PT-2023-20841 · Unknown · Alphaware - Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: Alphaware - Simple E-Commerce System version 1.0 Description: The issue is related to a SQL injection that can directly issue instructions to the background database system. This is possible via the "/alphaware/details.php?id" API endpoint,...

PT-2023-20567 · Covesa +1 · Dlt-Daemon +1

Name of the Vulnerable Software and Affected Versions: dlt-daemon versions through 2.18.8 Description: An issue was discovered in the Connected Vehicle Systems Alliance COVESA; formerly GENIVI dlt-daemon. Dynamic memory is not released after it is allocated in dlt-control-common.c. Recommendation...

PT-2023-16648 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Sales Tracker Management System. The issue is related to an unknown function of the file admin/products/view...

PT-2023-16526 · Sourcecodester · Sourcecodester Best Online News Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A vulnerability was found in the file check availability.php, where the manipulation of the username argument leads to exposure of sensitive information through data queries. The...

PT-2022-25572 · Unknown · Ndkadvancedcustomizationfields

Name of the Vulnerable Software and Affected Versions: NdkAdvancedCustomizationFields version 3.5.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the htmlNodes parameter. This enables attackers to...

PT-2022-7382 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance, Identity Manager version 10.0.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within...

PT-2022-27729 · Unknown · Helmet Store Showroom

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to a SQL Injection vulnerability at the Login Page. This vulnerability can be exploited to bypass admin access. Recommendations: For Helmet Store Showroom version 1.0, consid...

PT-2022-27353 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field after clicking "Add" in the "/linkedcontent/listfiles.php" component. This enables the...

1sticker.ru Cross Site Scripting vulnerability OBB-3072529

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-27121 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.3.3 Description: A SQL injection issue was found in the /Member/memberedit.html component. This allows for potential exploitation via SQL injection attacks. Recommendations: For Jizhicms version 2.3.3, consider restricting...

PT-2022-26806 · Unknown · Canteen Management System

Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achieved through the API endpoint "/youthappam/manage...

PT-2022-25366 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking parameter at the "/admin/client assign.php" API endpoint. Recommendations: For Wedding Planner...

PT-2022-25399 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: A SQL injection issue was found in Wedding Planner via the id parameter at the "/wedding details.php" endpoint. Recommendations: For Wedding Planner version 1.0, consider restricting access to the...