PT-2023-26585 · Unknown · Wger Workout Manager

Name of the Vulnerable Software and Affected Versions: wger Workout Manager version 2.2.0a3 Description: A Cross Site Scripting issue allows a remote attacker to gain privileges via the license author field in the add-ingredient function in the templates/ingredients/view.html,...

PT-2023-26589 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.0.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted payload to the "systemSettings.php" component. This enables the attacker to perform unauthorized actions on...

PT-2023-4720 · Unknown · Sicam Toolbox Ii

Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.10 Description: A vulnerability has been identified in SICAM TOOLBOX II where affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with lo...

Intel Unite® Android App Advisory

Summary: Potential security vulnerabilities in the Intel Unite® android application may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32609 Description: Improper access control in the Intel...

New Security Advisor amps up security in minutes

Malwarebytes Security Advisor, a transformation of the Nebula customer experience, enables organizations to visualize and improve their organization's security posture in just a few minutes. "If youre not fully configured, you arent fully protected," says Jonny Rivera, Director, Customer Experien...

PT-2024-12816 · Mariadb Foundation +1 · Mariadb +1

Name of the Vulnerable Software and Affected Versions: MariaDB version 10.5 Description: Insecure permissions in the sys exec function of MariaDB allow authenticated attackers to execute arbitrary commands with elevated privileges. This issue is disputed by the MariaDB Foundation because no...

PT-2023-24902 · Braincert.Com +1 · Virtual Classroom Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL...

PT-2023-23600 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega platform versions 6.1 through 7.3.1 Description: The issue concerns the use of default credentials by Pega platform clients. This could potentially lead to unauthorized access. Recommendations: For versions 6.1 through 7.3.1, change the...

PT-2023-4279 · Cockpit Hq · Cockpit

Name of the Vulnerable Software and Affected Versions: cockpit-hq/cockpit versions prior to 2.6.3 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability in the cockpit-hq/cockpit GitHub repository. This vulnerability exists due to inadequate protection of the web...

PT-2023-11650 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 3.9 Description: The issue allows remote attackers to run arbitrary code. This is achieved via the SEMCMS Upfile.php file, which is vulnerable to file upload attacks. Recommendations: For SEMCMS version 3.9, consider disabling...

IMDShift - Automates Migration Process Of Workloads To IMDSv2 To Avoid SSRF Attacks

AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks. Features...

CISA, NSA, FBI, and International Partners Release Joint CSA on Top Routinely Exploited Vulnerabilities of 2022 

The U.S. Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, Federal Bureau of Investigation FBI, and international partners are releasing a joint Cybersecurity Advisory CSA, 2022 Top Routinely Exploited Vulnerabilities. This advisory provides details on the top...

PT-2023-25444 · Phpjabbers · Phpjabbers Class Scheduling System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Class Scheduling System version 1.0 Description: The issue concerns a lack of verification when changing an email address and/or password on the Profile Page, allowing remote attackers to take over accounts. Recommendations: For P...

PT-2023-24319 · Control Id · Idsecure

Name of the Vulnerable Software and Affected Versions: Control ID IDSecure versions 4.7.26.0 and prior Description: An uncaught exception vulnerability exists, allowing attackers to cause the main web server of IDSecure to fault and crash, resulting in a denial of service. Recommendations: For...

PT-2023-25483 · Total Cms · Total Cms

Name of the Vulnerable Software and Affected Versions: Total CMS version 1.7.4 Description: The issue allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function. This can be achieved by uploading a malicious PHP file, potentially leading to code execution...

PT-2023-23080 · Unknown · Foundry Campaigns Service

Name of the Vulnerable Software and Affected Versions: Foundry Campaigns Service affected versions not specified Description: The issue concerns an unauthenticated information disclosure in a REST endpoint. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-20884 · Bluetens · Bluetensq

Name of the Vulnerable Software and Affected Versions: Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 Description: The issue allows attackers to perform Man-in-the-middle attacks in the BLE channel, enabling them to decrease or increase the intensity of the stimulator by...

PT-2023-5956 · Php +11 · Php +11

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. through 8.0.29 PHP versions 8.1. through 8.1.21 PHP versions 8.2. through 8.2.7 Description: The issue is related to the way PHP's XML functions rely on libxml global state to track configuration variables. This state can be...

Mozilla Releases Security Updates for Multiple Products

Mozilla has released security updates to address vulnerabilities for Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrato...

PT-2023-14942 · Data Illusion Survey Software Solutions · Ngsurvey

Name of the Vulnerable Software and Affected Versions: Data Illusion Survey Software Solutions ngSurvey versions 2.4.28 and below Description: The issue allows for Denial of Service when a survey contains a "Text Field", "Comment Field", or "Contact Details". Recommendations: For versions 2.4.28...