UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from function PackLinuxElf64::invertptdynamic in plxelf.cpp:5239 that causes the "bucket" variable to point to an inaccessible address...

pt-finance.de Cross Site Scripting vulnerability OBB-3228916

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress PT Addons for Elementor Lite Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software PT Addons for Elementor Lite Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 373346742be1 Credits István...

PT-2023-21377 · Rockwell Automation · Thinmanager Thinserver

Name of the Vulnerable Software and Affected Versions: Rockwell Automation's ThinManager ThinServer affected versions not specified Description: A heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field. An unauthenticated remot...

PT-2023-2225 · Cisco · Cisco Finesse

Name of the Vulnerable Software and Affected Versions: Cisco Finesse affected versions not specified Description: A vulnerability in the nginx configurations of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service DoS condition...

ptassist.com Cross Site Scripting vulnerability OBB-3204696

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-13888 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNAC versions 8.3.7, 8.5.0 through 8.5.4, 8.6.0 through 8.6.5, 8.7.0 through 8.7.6, 8.8.0 through 8.8.11, 9.1.0 through 9.1.7, 9.2.0 through 9.2.5, 9.4.0 Description: The issue is related to improper neutralization of argument...

PT-2023-35147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to the pt core execute cmd function not using a spinlock. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility ha...

PT-2023-16404 · Trendnet · Trendnet Tew-652Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-652BRP version 3.04B01 Description: A critical issue affects the Web Service component, specifically the file cfg op.ccp, leading to memory corruption through remote attack. The manipulation can be initiated remotely...

PT-2023-34762 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A potential security issue has been identified in the Linux Kernel, specifically in the omapfb module of the fbdev subsystem. The issue is related to a stack overflow warning. The actual impa...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a segmentation fault, via the PackLinuxElf64::invertptdynamic function in the plxelf.cpp file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its...

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

DEBIAN-CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

PT-2023-1125 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel. It allows an attacker to elevate their privileges. Recommendations: At the moment, there i...

PT-2023-13304 · Google · Automotive Android Os

Name of the Vulnerable Software and Affected Versions: Automotive Android OS affected versions not specified Description: The issue is related to memory corruption in Automotive Android OS caused by improper input validation. Recommendations: At the moment, there is no information about a newer...

CVE-2022-37934

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series...

PT-2023-14351 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is from the National...

PT-2022-26347 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to an integer overflow in the kernel mode layer nvidia.ko of the NVIDIA GPU Display Driver for Linux. This overflow may lead to information...

PT-2022-14778 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-36441 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.209 through 5.4.223 Description: A use-after-free issue exists in the l2cap conn del function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 5.4.209...