PT-2024-12121

Name of the Vulnerable Software and Affected Versions NetScoutnGeniusOne version 6.3.4 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages. Recommendations For NetScoutnGeniusOne version 6.3.4,...

PT-2024-14387 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross-Site Request Forgery CSRF via the component system/site/webconfig updagte. This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For FlyCms...

PT-2024-19186 · Unknown · Firefly-Iii

Name of the Vulnerable Software and Affected Versions: Firefly III versions prior to 6.1.1 Description: The issue allows for HTML injection in webhooks. It is related to a Client-Side Path Traversal CSPT vulnerability, which can be used to control data that was assumed to be uncontrollable. This...

PT-2024-11600 · Obsidian · Obsidian Mind Map

Name of the Vulnerable Software and Affected Versions: Obsidian Mind Map version 1.1.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document. Recommendations: For Obsidian Mind Map version 1.1.0, update to a version that contain...

tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)

Summary The tj-actions/changed-files workflow allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak secrets. Details The changed-files action returns a list of files changed in a commit or pull request which provides an escapejson...

Exploit for SQL Injection in Phpgurukul Hospital_Management_System

CVE-2023-7172 Overview This project contains a vulnerabl...

PT-2024-2673 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue in YASM is related to the expand smacro function, which can lead to uncontrolled resource consumption. This can allow a remote attacker to cause a denial of service. The vulnerable component ...

PT-2024-17492

Name of the Vulnerable Software and Affected Versions idna versions 0.5.0 and earlier url versions prior to 2.5.4 Description The issue is related to improper validation of unsafe equivalence in punycode by the idna crate from Servo rust-url. This allows an attacker to create a punycode hostname...

PT-2023-32884 · Weiye Jing · Datax-Web

Name of the Vulnerable Software and Affected Versions: WeiYe-Jing datax-web version 2.1.2 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting some unknown functionality of the file /api/log/killJob. The manipulation of the processId...

PT-2023-30874 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 8.5.14 Concrete CMS versions 9 prior to 9.2.3 Description: The issue allows Cross Site Request Forgery CSRF via the "ccm/calendar/dialogs/event/delete/submit" API endpoint. An attacker can force an admin to dele...

PT-2023-31058 · Powercms · Powercms

Name of the Vulnerable Software and Affected Versions: PowerCMS versions 4 Series through 6 Series PowerCMS versions 3 Series and earlier Description: The issue is a stored cross-site scripting vulnerability. If exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2023-29418 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the "/update.php?q=quiz" resource does not validate the characters received, and they are sent...

PT-2023-31139

Name of the Vulnerable Software and Affected Versions Hotel Management version 1.0 Description The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the check out date parameter of the "reservation.php" resource is copied into the HTML document as...

PT-2023-31137 · Unknown · Hotel Management

Name of the Vulnerable Software and Affected Versions: Hotel Management version 1.0 Description: The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the adults parameter of the "reservation.php" resource is copied into the HTML document as plain...

PT-2023-31138

Name of the Vulnerable Software and Affected Versions Hotel Management version 1.0 Description The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the check in date parameter of the "reservation.php" resource is copied into the HTML document as...

PT-2024-4006

Name of the Vulnerable Software and Affected Versions PHP versions 8.1.0 through 8.1.28 PHP versions 8.2.0 through 8.2.19 PHP versions 8.3.0 through 8.3.7 Description An argument injection flaw exists in PHP when running in CGI mode on Windows with Apache. The issue stems from the Windows...

Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Bamboo Data Center and Server

This High severity org.apache.tomcat:tomcat-catalina Dependency vulnerability was introduced in versions 9.2.1, 9.3.0, and 9.4.0 of Bamboo Data Center and Server. This org.apache.tomcat:tomcat-catalina Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

PT-2023-31548 · Unknown · Zedpro For Windows +4

Name of the Vulnerable Software and Affected Versions: ZED! for Windows versions before Q.2020.3 through Q.2021.2 ZONECENTRAL for Windows versions before Q.2021.2 through 2023.5 ZEDMAIL for Windows version 2023.5 and earlier ZED! for Windows, Mac, Linux version 2023.5 and earlier ZEDFREE for...

PT-2023-9650 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.23 Oracle Database Server versions 21.3 through 21.14 Oracle Database Server version 23.4 Description: The issue is related to the Java VM component of Oracle Database Server, where an incorrect...

PT-2023-9572

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23 Oracle GraalVM for JDK versions 17.0.12, 21.0.4, 23 Oracle GraalVM Enterprise Edition versions 20.3.15, 21.3.11 Description The issue allows an unauthenticated attacker wi...