PT-2023-29044

Name of the Vulnerable Software and Affected Versions SourceCodester Task Management System version 1.0 Description A Stored Cross Site Scripting XSS issue was found in the software. It allows attackers to execute arbitrary code via a parameter field in the "index.php?page=project list" API...

PT-2023-29018 · E017 Cms · E017 Cms

Name of the Vulnerable Software and Affected Versions: e017 CMS version 2.3.2 Description: A Cross Site Scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Name field in the Manage Menu. This enables the attacker to perform unauthorized actions...

PT-2023-15226 · Unknown · Generex Cs141

Name of the Vulnerable Software and Affected Versions: Generex CS141 versions prior to 2.06 Description: The issue allows for an unrestricted upload of files, enabling an attacker to upload and/or delete any type of file without format restrictions or authentication in the "upload" directory. Thi...

PT-2023-5535 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L B1 version 2.02 Description: The issue is related to a buffer overflow in the formSetWAN Wizard55 function, which can be exploited by a remote attacker to cause a denial of service. This occurs when data is written beyond the...

PT-2023-27957 · Unknown · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewTicker version 1.0.5 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the "index.php" component. This enables the attacker to perform Cross Site Scripting...

Incorrect AfEth.price() calculation

Lines of code Vulnerability details Impact AfEth.price may be calculated as too low. Proof of Concept AfEth.requestWithdraw does not burn the afEth but only transfers it to itself. Hence the withdrawRatio is calculated using only the free supply of afEth: AfEth.solL180-L185 // ratio of afEth bein...

PT-2023-5776 · Acronis · Acronis Cyber Protect 15 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions before build 35979 Description: The issue is related to sensitive information disclosure and manipulation due to improper authorization. It is caused by an error in processing user-controlled authorization...

PT-2023-27858 · Unknown · Everest News Pro

Name of the Vulnerable Software and Affected Versions: Everest News Pro theme versions 1.1.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on the client-side, potential...

PT-2023-27860 · Everest Themes · Arya Multipurpose Pro

Name of the Vulnerable Software and Affected Versions: Everest Themes Arya Multipurpose Pro theme versions 1.0.8 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts...

PT-2023-27593 · Unknown · Pluginops Landing Page Builder

Name of the Vulnerable Software and Affected Versions: PluginOps Landing Page Builder plugin versions 1.5.1.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For PluginOps Landin...

PT-2023-27768 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS versions prior to Sonoma 14 Description: A privacy issue was addressed with improved private data redaction for log entries. An...

PT-2023-26845 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue was addressed with improved checks. Processing web content may disclose sensitive information. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to resolve the issue...

PT-2023-25971 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A lock screen issue was addressed with improved state management, allowing a user to potentially view restricted content from the lock screen. Recommendations: For versions prior to 14, update to macOS...

PT-2023-31900 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/demo versions prior to 10.3.0 Description: The issue concerns excessive data query operations in a large data table. Additionally, introspection is enabled on the demo site demo.pimcore.fun, which allows users to run introspection...

PT-2023-28199 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A race condition was addressed with improved locking, which may have allowed an app to modify protected parts of the file system. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to...

PT-2023-27461 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. Recommendations: For versions prior to 14, update to...

PT-2023-27503 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent. Recommendations: For versions prior to 14,...

PT-2023-27446 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to bypass certain Privacy preferences. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to...

PT-2023-27335 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.7 to 2.8.21 Description: The issue allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory. Recommendations: For Welcart e-Commerce versions 2.7 to 2.8.21, consider...

PT-2023-28356 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper versions prior to 0.3.10 Description: The abi decode function in Vyper does not validate input when it is nested in an expression, allowing for bounds checking to be bypassed and resulting in incorrect results. This can be triggered by...