PT-2023-19919 · Papercut · Papercutng Mobility Print

Name of the Vulnerable Software and Affected Versions: PaperCutNG Mobility Print version 1.0.3512 Description: The PaperCutNG Mobility Print application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the client's host in the "configure printe...

PT-2023-36027 · Git +1 · Mrab-Regex

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as bytes1 char at, ascii at line end, and try match. Recommendations: At the moment, there is no...

PT-2023-28283 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: CloudExplorer Lite version 1.3.1 Description: An issue in CloudExplorer Lite allows an attacker to obtain sensitive information via the login key component. Recommendations: For CloudExplorer Lite version 1.3.1, consider disabling the login k...

PT-2023-5390 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.423 and earlier, LTS versions 2.414.1 and earlier Description: The issue is related to the creation of a temporary file in the system temporary directory with default permissions when installing a plugin from a URL. This...

PT-2023-27722 · Fujitsu · Fujitsu Arconte Áurea

Name of the Vulnerable Software and Affected Versions: Fujitsu Arconte Áurea version 1.5.0.0 Description: The issue is related to a weak password recovery mechanism, which could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a...

PT-2023-5743

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.05.4 Description JetBrains TeamCity contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access to the server and execute arbitrary code. This...

PT-2023-6853 · Moxa · Moxa Pt-G503 Series

Name of the Vulnerable Software and Affected Versions: Moxa PT-G503 Series firmware versions prior to v5.2 Description: The issue is related to the absence of the secure flag in session cookies, which could allow a remote attacker to gain unauthorized access to protected information. This may lea...

PT-2023-28342 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper versions 0.2.9 through 0.3.9 Description: The issue concerns locks of the type @nonreentrant"" or @nonreentrant'' that do not produce reentrancy checks at runtime. This can be mitigated by ensuring the lock name is a non-empty string...

PT-2023-28329 · Unknown · Jodit Editor

Name of the Vulnerable Software and Affected Versions: Jodit Editor version 4.0.0-beta.86 Description: The issue allows a remote attacker to obtain sensitive information via the rich text editor component. This is due to a Cross Site Scripting vulnerability. Recommendations: For Jodit Editor...

PT-2023-28321 · Netis Systems · Netis Systems Wf2409Ev4

Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS WF2409Ev4 version 1.0.1.705 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information. This is achieved via the password parameter in the "/etc/shadow.sample" component...

PT-2023-36099 · Hpack · Hpack

Name of the Vulnerable Software and Affected Versions: hpack affected versions not specified Description: The hpack crate is no longer maintained. Consider using alternative crates such as fluke-hpack or httlib-huffman. Recommendations: At the moment, there is no information about a newer version...

How Cisco Talos IR helped a healthcare company quickly resolve a Qakbot attack

Partnership and proactive measures reduce resolution time from weeks to mere hours. Healthcare is one of the most popular targets for threat actors, as evidenced by the fact that it was the most-targeted sector in each of Cisco Talos Incident Responses past two Quarterly Trends Reports. But if...

Rockwell Automation Pavilion8

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion8 Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to retrieve other...

PT-2023-9908 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, potentially affected devices, or real-world incidents. Recommendations: At th...

PT-2023-11408 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate that is unused by its CNA and refers to the National...

PT-2023-10050 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-9967 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-9976 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, potentially affected devices, or real-world incidents. Recommendations: At th...

PT-2023-9965 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. Recommendations: At the moment, there is no information about a newer version...

PT-2023-20784 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for a proof of concept related to a specific issue, but no details are provided about the issue itself, including its nature,...