PT-2023-24292 · Mohammad I. Okfie · Wp-Hijri

Name of the Vulnerable Software and Affected Versions: Mohammad I. Okfie WP-Hijri plugin versions 1.5.1 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

PT-2023-23295 · WordPress · Mailarchiver

Name of the Vulnerable Software and Affected Versions: MailArchiver plugin for WordPress versions up to, and including, 2.10.1 Description: The issue is related to Stored Cross-Site Scripting via an email subject due to insufficient input sanitization and output escaping. This allows...

PT-2023-27155 · WordPress · Postx

Name of the Vulnerable Software and Affected Versions: PostX WordPress plugin versions prior to 3.0.6 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This...

PT-2023-27666 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue concerns a Buffer Overflow that can be triggered via the function fromGetWirelessRepeat. Recommendations: For version 15.03.05.16, consider disabling the fromGetWirelessRepeat function as a...

PT-2023-27976 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Description: A stack overflow issue was discovered via the timeZone parameter at the "/goform/SetSysTimeCfg" API endpoint. This issue affects the Tenda AC7 router. Recommendations: For Tenda AC7 version...

PT-2023-24723 · WordPress · Bhavik Patel Woocommerce Order Address Print Plugin

Name of the Vulnerable Software and Affected Versions: Bhavik Patel Woocommerce Order address Print plugin versions = 3.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into the website, potentially leading t...

PT-2023-27974 · Tenda · Tenda Ac7 +2

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 1.0 V15.03.06.44 Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC5 version 1.0RTL V15.03.06.28 Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetIpMacBind" API endpoint. This issue...

PT-2023-24623 · WordPress · Woocommerce Box Office

Name of the Vulnerable Software and Affected Versions: WooCommerce Box Office plugin versions = 1.1.50 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by authenticated users with contributor or higher permissions. There is ...

PT-2023-5340 · Libxml2 +7 · Libxml2 +7

Name of the Vulnerable Software and Affected Versions: libxml2 versions prior to 2.11.0 Description: The libxml2 library contains a vulnerability where crafted XML input can cause a global buffer overflow via the xmlSAX2StartElement function. This can lead to a denial-of-service DoS condition. Th...

PT-2023-27069 · Bdcom · Bdcom Olt P3310D-2Ac

Name of the Vulnerable Software and Affected Versions: BDCOM OLT P3310D-2AC version 10.1.0F Build 69083 Description: A cross-site scripting XSS vulnerability in the device web interface, specifically the Log Query page, allows attackers to execute arbitrary web scripts or HTML via a crafted paylo...

PT-2023-27020 · Audimexee · Audimexee

Name of the Vulnerable Software and Affected Versions: AudimexEE version 15.0 Description: A full path disclosure issue was discovered. This means that the software may reveal the full path of files or directories on the server, potentially allowing attackers to gather sensitive information about...

PT-2023-27624 · Phpjabbers · Php Jabbers Restaurant Booking Script

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Restaurant Booking Script version 3.0 Description: The issue is related to user enumeration, which occurs during password recovery. A difference in messages could allow an attacker to determine if a user is valid or not, enabling ...

PT-2023-24986 · Techview · Techview La-5570 Wireless Gateway

Name of the Vulnerable Software and Affected Versions: TechView LA-5570 Wireless Gateway version 1.0.19 T53 Description: An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing physical attackers to gain escalated privileges via a telnet connection. Recommendations: For version...

PT-2023-27635 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: Libming version 0.4.8 Description: The issue allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function. Recommendations: For Libming version 0.4.8, consider disabling the makeswf function until a...

PT-2023-27632 · Phpjabbers · Phpjabbers Make An Offer Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Make an Offer Widget version 1.0 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid user...

PT-2023-27621 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: The issue is related to user enumeration, which occurs during password recovery. A difference in messages could allow an attacker to determine if a user is valid or not, enabling a brute for...

PT-2023-17397 · Hitachi · Hitachi Hirdb Server With Addtional Function +2

Name of the Vulnerable Software and Affected Versions: Hitachi HiRDB Server versions before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02 Hitachi HiRDB Server With Addtional Function versions before 09-60-2M, before...

PT-2023-23906 · WordPress · Rednao Donations Made Easy – Smart Donations

Name of the Vulnerable Software and Affected Versions: RedNao Donations Made Easy – Smart Donations plugin versions = 4.0.12 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites, potentiall...

PT-2023-27516 · Unknown · Weblogic-Framework

Name of the Vulnerable Software and Affected Versions: weblogic-framework versions 0.2.3 and prior Description: The issue is related to a deserialization vulnerability that may lead to remote code execution. When the weblogic-framework receives the command echo, it directly deserializes the data...

PT-2023-27498 · Unknown · Skylark App For Android +1

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead a user to...