PT-2023-20784 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for a proof of concept related to a specific issue, but no details are provided about the issue itself, including its nature,...

PT-2023-10046 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-9922 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-28287 · Lenosp · Lenosp

Name of the Vulnerable Software and Affected Versions: lenosp versions 1.0 through 1.2.0 Description: The issue allows attackers to execute HTML code via a crafted JPG file. This is achieved through an arbitrary file upload vulnerability in the /user/upload component. Recommendations: For version...

PT-2023-10050 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-9908 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, potentially affected devices, or real-world incidents. Recommendations: At th...

PT-2023-9965 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. Recommendations: At the moment, there is no information about a newer version...

PT-2023-11082 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-27679 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial MooSocial Software version Demo Description: The issue allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. This is a Cross Site Request Forgery vulnerability. Recommendations: For...

PT-2023-11408 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate that is unused by its CNA and refers to the National...

PT-2023-9967 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-11176 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment, there is no information about a newer...

PT-2023-31233 · WordPress · Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce plugin for WordPress versions up to, and including, 7.1.0 Description: The issue is related to Stored Cross-Site Scripting via multiple shortcodes due to insufficient input sanitization and output escaping on...

PT-2023-5065 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Visual Studio Code, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...

PT-2023-23091 · Unknown · Gotham Cerberus

Name of the Vulnerable Software and Affected Versions: Gotham Cerberus versions prior to 100.230704.0-27-g031dd58 Description: The Gotham Cerberus service has a stored cross-site scripting XSS issue that could allow an attacker with access to Gotham to launch attacks against other users...

PT-2023-29350

Name of the Vulnerable Software and Affected Versions OpenText Micro Focus Visual COBOL versions 7.0 patch updates 19 and 20 OpenText Micro Focus Visual COBOL versions 8.0 patch updates 8 and 9 OpenText Micro Focus Visual COBOL version 9.0 patch update 1 OpenText Micro Focus COBOL Server versions...

PT-2023-27547 · S4Core · S4Core

Name of the Vulnerable Software and Affected Versions: S4CORE Manage Purchase Contracts App versions 102 through 107 Description: The issue is related to the lack of necessary authorization checks for authenticated users, which could allow an attacker to perform unintended actions, resulting in...

PT-2023-28520 · WordPress · Min Max Control

Name of the Vulnerable Software and Affected Versions: Min Max Control WordPress plugin versions prior to 4.6 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

PT-2023-27544 · Sap · Sap Powerdesigner Client

Name of the Vulnerable Software and Affected Versions: SAP PowerDesigner Client version 16.7 Description: The issue allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an unsuspecting user, to have it executed by the application on behalf of the user. Th...

PT-2023-25148 · WordPress · Ftp Access

Name of the Vulnerable Software and Affected Versions: FTP Access WordPress plugin versions 1.0 and earlier Description: The issue concerns a lack of authorization and CSRF checks when updating settings in the plugin, along with missing sanitization and escaping. This allows any authenticated use...