PT-2023-29320 · Unknown · Easy Chat Server

Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 3.1 and earlier Description: The issue arises from insufficient encryption of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is stored via the "POST" method at the...

PT-2023-27693 · Widestand · Widestand

Name of the Vulnerable Software and Affected Versions: WideStand versions prior to 5.3.5 Description: The issue is a Cross-site Scripting XSS reflected vulnerability. It generates one of the meta tags directly using the content of the queried URL, allowing an attacker to inject HTML/Javascript co...

PT-2023-20405 · Cage Web Design · Optimize Database After Deleting Revisions

Name of the Vulnerable Software and Affected Versions: CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin versions = 5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

PT-2023-5790 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 29258 Description: The issue is related to sensitive information disclosure and manipulation due to missing authorization. This could allow an attacker to gain unauthorized access to protected information...

PT-2023-29317 · Unknown · Easy Address Book Web Server

Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue affects the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, and workzip of the "/addrbook.ghp" file, allowing an...

PT-2023-29087 · Unknown · Small Crm In Php

Name of the Vulnerable Software and Affected Versions: Small CRM in PHP version 3.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Sma...

CVE-2023-5345 Use-after-free in Linux kernel's fs/smb/client component

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3fscontextparseparam, ctx-password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading pas...

PT-2023-19665 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 767 and earlier Description: A Cross-site Request Forgery CSRF vulnerability allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. Recommendations...

PT-2023-27318 · WordPress · Crudlab Wp Like Button

Name of the Vulnerable Software and Affected Versions: CRUDLab WP Like Button plugin versions = 1.7.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-25946 · Ibm · Ibm Observability With Instana

Name of the Vulnerable Software and Affected Versions: IBM Observability with Instana versions 1.0.243 through 1.0.254 Description: The issue allows an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. Recommendations: For versions 1.0.243...

PT-2023-23946 · Buddyboss · Buddyboss

Name of the Vulnerable Software and Affected Versions: BuddyBoss version 2.2.9 Description: The issue is a Cross-Site Scripting vulnerability that could allow a local attacker with basic privileges to execute a malicious payload through the name parameter, specifically when set to image.jpg. This...

PT-2023-20081 · WordPress · Gopi Ramasamy Wp Tell A Friend Popup Form Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy WP tell a friend popup form plugin versions = 7.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that th...

PT-2023-28051 · WordPress · Mycryptocheckout

Name of the Vulnerable Software and Affected Versions: edward plainview MyCryptoCheckout plugin versions = 2.125 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-26392 · Cyle Conoly · Wp-Flybox

Name of the Vulnerable Software and Affected Versions: Cyle Conoly WP-FlyBox plugin versions = 6.46 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

PT-2023-22891 · Evaluator · Evaluator

Name of the Vulnerable Software and Affected Versions: Evaluator versions prior to SMR Oct-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by local attackers. Recommendations: For versio...

PT-2023-27320 · WordPress · Futurio Extra

Name of the Vulnerable Software and Affected Versions: FuturioWP Futurio Extra plugin versions 1.8.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows the activation of arbitrary plugins. This can be exploited by tricking a user into performing...

PT-2023-26815 · Woocommerce · Thedotstore Banner Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Banner Management For WooCommerce plugin versions = 2.4.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

PT-2023-27052 · Prestashop · Theme Volty Cms Category Chain Slider

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Slider module for PrestaShop versions up to 4.0.1 Description: The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Slider module for PrestaShop, allowing a guest to...

PT-2023-26162 · WordPress · Optimonk

Name of the Vulnerable Software and Affected Versions: OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin versions = 2.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

PT-2023-24253 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the parameter options within the WGET check function, which is vulnerable to OS command injection blind. Recommendations: For DTS Monitoring version 3.57.0, consider...