PT-2023-2154 · Cisco · Cisco Small Business Rv016 +5

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 affected versions not specified Description: The issue exists due to insufficient protection of the web page structure and insufficient input validation by the web-based...

PT-2023-17294 · WordPress · Yourchannel

Name of the Vulnerable Software and Affected Versions: YourChannel plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to a missing capability check when resetting plugin settings via the yrc nuke GET parameter. This allows unauthenticated attackers to dele...

PT-2023-16630 · Bhima · Bhima

Name of the Vulnerable Software and Affected Versions: Bhima version 1.27.0 Description: The issue allows an authenticated attacker with regular user permissions to update arbitrary user session data, including username, email, and password. This is due to the application being vulnerable to...

SUSE CVE-2023-28645

Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure view feature of the rich documents app can be bypassed by using unprotected internal API endpoint of the rich documents app. It is recommended that the Nextcloud Office app...

PT-2023-16124 · Uvdesk · Uvdesk

Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.1 Description: The issue allows an authenticated remote attacker to execute commands on the server due to improper validation of profile pictures uploaded by customers. Recommendations: For Uvdesk version 1.1.1, consider...

PT-2023-11539 · Unknown · Directus Api

Name of the Vulnerable Software and Affected Versions: Directus API version 2.2.0 Description: A denial of service issue in the Directus API allows a remote attacker to cause a denial of service by sending a large number of HTTP requests. Recommendations: For Directus API version 2.2.0, consider...

PT-2023-14003 · Peepso · Peepso Community

Name of the Vulnerable Software and Affected Versions: PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin versions = 6.0.2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing...

PT-2023-8807

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.21 Description: The issue is related to the improper handling of backticks as Javascript string delimiters in templates, which can lead to the injection of arbitrary Javascript code into the Go template. This occurs whe...

PT-2023-11645 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish versions 3.0.11 and earlier Description: An issue in Jsish allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file. Recommendations: For versions 3.0.11 and earlier, consider disabling...

PT-2023-9834

Name of the Vulnerable Software and Affected Versions pgadmin affected versions not specified Description A vulnerability was found in pgadmin, where users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attemp...

PT-2023-11591 · Pfsense +1 · Pfsense +1

Name of the Vulnerable Software and Affected Versions: pfSense version 2.4.4 ACME package version 0.6.3 Description: A Cross Site Scripting issue allows attackers to execute arbitrary code via the RootFolder field of "acme certificates.php". Recommendations: For pfSense version 2.4.4, update the...

PT-2023-11565 · Mingsoft · Mingsoft Mcms

Name of the Vulnerable Software and Affected Versions: Ming-Soft MCMS versions prior to 5.1 Description: A SQL Injection issue allows a remote attacker to execute arbitrary code via the basic title parameter. This issue is resolved in version 5.1. Recommendations: For versions prior to 5.1, updat...

PT-2023-17196

Name of the Vulnerable Software and Affected Versions Fernus Informatics LMS versions prior to 23.04.03 Description The issue allows OS Command Injection and Server Side Include SSI Injection due to an Unrestricted Upload of File with Dangerous Type vulnerability. This vulnerability can be...

CVE-2023-29218

The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service reduction of reputation score by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as exploited...

Design/Logic Flaw

DISPUTED The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service reduction of reputation score by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as...

CVE-2023-29218

CVE-2023-29218 concerns Twitter’s Recommendation Algorithm (ec83d01). The available documents describe a vulnerability where attackers can cause a denial-of-service-like effect (reduction of a target’s reputation score) by coordinating negative signals across multiple accounts (e.g., unfollowing,...

Twitter Recommendation Algorithm 安全漏洞

Twitter Recommendation Algorithm is a Twitter recommendation algorithm open-sourced by Twitter in the United States. A security vulnerability exists in Twitter Recommendation Algorithm ec83d01 and prior versions, which stems from a vulnerability that allows an attacker to cause a denial of servic...

CVE-2023-29218

The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service reduction of reputation score by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as exploited...

PT-2023-22211

Name of the Vulnerable Software and Affected Versions Twitter Recommendation Algorithm through ec83d01 Description The issue allows attackers to cause a denial of service by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing,...

PT-2023-2231 · Hitachi Vantara · Pentaho Business Analytics Server

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.4.0.0 Hitachi Vantara Pentaho Business Analytics Server version 9.3.0.1 and earlier Hitachi Vantara Pentaho Business Analytics Server version 8.3.x with the Big Data Plugin...