PT-2023-25689 · Unknown · Webmention.Js

Name of the Vulnerable Software and Affected Versions: webmention.js versions prior to 0.5.5 Description: The issue is related to Cross-site Scripting XSS - DOM in the webmention.js GitHub repository. This type of attack occurs when an application includes user input in its output without proper...

PT-2023-24007 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6 Description: The issue allows an authenticated attacker to obtain sensitive information via a crafted URL. Recommendations: For Archer Platform versions prior to 6.13,...

PT-2023-26018 · Unknown · Wrh-300Wh-H +1

Name of the Vulnerable Software and Affected Versions: WRH-300WH-H versions 2.12 and earlier WTC-300HWH versions 1.09 and earlier Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. Recommendations: For WRH-300WH-H versions 2.12 and...

PT-2023-26019 · Elecom · Elecom Wtc-C1167Gc-W +3

Name of the Vulnerable Software and Affected Versions: ELECOM WRH-300WH-H versions 2.12 and earlier ELECOM WTC-300HWH versions 1.09 and earlier ELECOM WTC-C1167GC-B versions 1.17 and earlier ELECOM WTC-C1167GC-W versions 1.17 and earlier Description: The issue allows a remote unauthenticated...

PT-2023-9043 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow issue was discovered in the frmL7ProtForm function, related to the page parameter. This could allow a remote attacker to impact the...

PT-2023-25876 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: Auto-GPT versions prior to 0.4.3 Description: The issue arises from the use of a different docker-compose.yml file when running Auto-GPT by cloning the git repo and executing docker compose run auto-gpt in the repo root. This file mounts itse...

PT-2023-25877 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: Auto-GPT versions prior to 0.4.3 Description: The issue allows for a path traversal attack, enabling the overwrite of any .py file outside the workspace directory by specifying a malicious basename argument, such as ../../../main.py. This can...

PT-2023-3843 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to perfor...

SonicWall GMS and Analytics affected by multiple vulnerabilities

SonicWall GMS and Analytics products are affected by critical, high, and medium severity vulnerabilities. While it is important to note that there is currently no evidence of exploitation, SonicWall strongly recommends that organizations running older versions of GMS and Analytics builds upgrade ...

CVE-2023-37582 Apache RocketMQ: Possible remote code execution when using the update configuration function

The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...

PT-2023-12527 · WordPress · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart plugin for WordPress versions up to, and including, 2.8.28 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the sunshine products quicksave post function. This...

PT-2023-22686 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar versions prior to 2.10.4 Apache Pulsar version 2.11.0 Description: The issue affects Apache Pulsar when a client connects to the Pulsar Function Worker via the Pulsar Proxy, which uses mTLS authentication. The Pulsar Function...

PT-2023-23241 · WordPress · Gd Mail Queue

Name of the Vulnerable Software and Affected Versions: GD Mail Queue plugin for WordPress versions up to and including 3.9.3 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages via emai...

PT-2023-23025 · WordPress · Fluentsmtp

Name of the Vulnerable Software and Affected Versions: FluentSMTP plugin for WordPress versions up to and including 2.2.4 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages via an emai...

PT-2023-6695 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S10 on MX Series Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S7 on MX Series Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S8 on MX Series Juniper Networks Junos OS 19.4...

PT-2023-26050 · Unknown · Online Piggery Management System

Name of the Vulnerable Software and Affected Versions: Online Piggery Management System version 1.0 Description: The issue allows an unauthenticated user to upload a php file by sending a POST request to the "add-pig.php" endpoint. This enables potential malicious activities. Recommendations: For...

PT-2024-9626

Name of the Vulnerable Software and Affected Versions golang.org/x/crypto versions prior to 0.31.0 Description The issue is related to the misuse of the ServerConfig.PublicKeyCallback callback in applications and libraries, which may lead to an authorization bypass. The SSH protocol allows client...

PT-2023-23294 · WordPress · Mailtree Log Mail

Name of the Vulnerable Software and Affected Versions: Mailtree Log Mail plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to Stored Cross-Site Scripting via an email subject due to insufficient input sanitization and output escaping. This allows...

PT-2023-3800 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to a Path Traversal vulnerability that allows a remote authenticated attacker to read arbitrary files from the...

PT-2023-24259 · Unknown · Powershield Snmp Web Pro

Name of the Vulnerable Software and Affected Versions: PowerShield SNMP Web Pro version 1.1 Description: The authentication mechanism contains an issue that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This...