PT-2022-25225 · Unknown · Online Banking System

Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the search parameter at the "/net-banking/manage customers.php" API endpoint. Recommendations: For...

PT-2022-22548 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6e41b0 endpoint. Recommendations: For OTFCC commit 617837b, as a temporary workaround, consider...

PT-2022-23911 · Unknown · Shirne Cms

Name of the Vulnerable Software and Affected Versions: Shirne CMS version 1.2.0 Description: The issue is related to a Path Traversal vulnerability that could cause arbitrary file read. This is possible via the /static/ueditor/php/controller.php endpoint. Recommendations: For Shirne CMS version...

PT-2022-21960 · Libjxl · Libjxl

Name of the Vulnerable Software and Affected Versions: libjxl version 0.6.1 Description: The issue is related to an assertion failure in the LowMemoryRenderPipeline::Init function, located in the render pipeline/low memory render pipeline.cc file. No information is provided about the estimated...

PT-2022-3049

Name of the Vulnerable Software and Affected Versions Directory Management System version 1.0 Description The issue is related to a SQL injection vulnerability in the search-dirctory.php component of the Directory Management System. This vulnerability allows a remote attacker to execute arbitrary...

PT-2022-3474 · Schneider Electric · Conext Combox

Name of the Vulnerable Software and Affected Versions: Conext ComBox All Versions Description: A Cross-Site Request Forgery CSRF issue exists, potentially allowing an attacker to override system configurations and cause a reboot loop through a specially crafted POST request. This could lead to a...

PT-2022-11738 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue allows an attacker to obtain sensitive information, such as wifikey, without authorization through the getSysStatusCfg function. Recommendations: For TOTOLINK EX1200T version...

PT-2022-18807 · Skycaiji · Skycaiji

Name of the Vulnerable Software and Affected Versions: Skycaiji version 2.4 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the "/SkycaijiApp/admin/controller/Develop.php" API endpoint. Recommendations: For Skycaiji version 2.4, consider...

ccnxd.com Cross Site Scripting vulnerability OBB-2452191

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-17720 · Marky · Marky

Name of the Vulnerable Software and Affected Versions: Marky commit 3686565726c65756e Description: The issue is related to a remote code execution RCE vulnerability. It allows attackers to execute arbitrary code via injection of a crafted payload through the Display text fields. Recommendations:...

PT-2022-17291 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A stack overflow issue was discovered in the SetVirtualServerCfg function via the list parameter. Recommendations: For Tenda AC9 version 15.03.2.21, consider restricting access to the...

PT-2022-7430 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ocelot vlan del function in the Linux kernel's Microsemi network adapter driver, which is vulnerable to a use-after-free condition. This occurs because ocel...

PT-2021-6887 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.4.0 through 3.4.10 Wireshark version 3.6.0 Description: The issue is related to a crash in the Sysdig Event dissector, which can be exploited to cause a denial of service via packet injection or crafted capture file. This...

PT-2021-6491

Name of the Vulnerable Software and Affected Versions Redis versions 5.0.7 Description The issue is related to a segmentation fault in the redis-server component of Redis, which can lead to a denial of service DOS. This can be exploited by a remote attacker to cause a service disruption. The vend...

PT-2021-20953 · Hitachi Abb Power Grids · Hitachi Abb Power Grids Esoms

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids eSOMS versions prior to 6.3 Description: The issue is related to a password autocomplete vulnerability in the web application password field, allowing an attacker to gain access to user credentials stored by the browse...

PT-2021-10858 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phplist version 3.5.3 Description: A stored cross site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Send test field under the Start or continue campaign module...

Critical VMware Zero-Day Bug Allows Command Injection; Patch Pending

The U.S. Cybersecurity and Infrastructure Security Agency is warning of a zero-day bug affecting six VMware products including its Workspace One, Identity Manager and vRealize Suite Lifecycle Manager. The critical unpatched bug is a command injection vulnerability. In a separate VMware advisory,...

PT-2020-14817 · Philips · Patient Information Center Ix

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 Description: The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other...

PT-2020-14821 · Philips · Patient Information Center Ix +1

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 PerformanceBridge Focal Point version A.01 Description: The software does not properly verify the identity of an actor, allowing the claim to be insufficiently proven...

servizionline.comune.preganziol.tv.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151773 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...