PT-2022-4615 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 15.1.6 GitLab versions 15.2 through 15.2.4 GitLab versions 15.3 through 15.3.2 Description: The issue is related to insufficient input validation in the ipynb Notebook component of GitLab, a platform for collaborative...

PT-2022-4499 · Ibm · Ibm Security Identity Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Manager versions 6.0 through 6.0.2 Description: The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted Web site, the attacker cou...

PT-2022-23463 · Hytec Inter · Hytec Inter Hwl-2511-Ss

Name of the Vulnerable Software and Affected Versions: Hytec Inter HWL-2511-SS versions 1.05 and below Description: A command injection vulnerability in the CLI implementation allows attackers to execute arbitrary commands with root privileges. Recommendations: For Hytec Inter HWL-2511-SS version...

PT-2022-16242 · WordPress · Simply Schedule Appointments

Name of the Vulnerable Software and Affected Versions: Simply Schedule Appointments WordPress plugin versions prior to 1.5.7.7 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capabilit...

PT-2022-24564 · Zoho · Zoho Manageengine Opmanager +4

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 125658 Zoho ManageEngine OpManager Plus versions prior to 126003 Zoho ManageEngine OpManager MSP versions prior to 126105 Zoho ManageEngine Network Configuration Manager versions prior to 126120...

PT-2022-23468 · Seiko · Seiko Skybridge Mb-A200

Name of the Vulnerable Software and Affected Versions: Seiko SkyBridge MB-A200 versions 01.00.04 and below Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the Ping parameter at the "ping exec.cgi" endpoint. Recommendations: For Seiko...

PT-2022-23571 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Id parameter at the "/stocks/manage stockout.php" API endpoint. There is no...

PT-2022-24570 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: exotel aka exotel-py version 0.1.6 Description: The exotel package in PyPI includes a code execution backdoor inserted by a third party. This backdoor allows for code execution, posing a significant security risk. Users should be aware of thi...

PT-2025-25881

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc2-00433-gede0a8d3307a Description A vulnerability in the Linux kernel has been resolved, related to the handling of MSRHV when entering RTAS firmware on IBM Cell machines. This issue caused crashes due to...

PT-2022-23449 · Unknown · Kensite Cms

Name of the Vulnerable Software and Affected Versions: Kensite CMS version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the name and oldname parameters at the "/framework/mod/db/DBMapper.xml" API endpoint. Recommendations:...

PT-2022-23390 · H3C · H3C B5 Mini

Name of the Vulnerable Software and Affected Versions: H3C B5 Mini version B5MiniV100R005 Description: A stack overflow issue was discovered in the function EditMacList.d. Recommendations: For version B5MiniV100R005, consider disabling the EditMacList.d function as a temporary workaround until a...

PT-2022-23405 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered, which occurs via the pppoeUser parameter. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139 B20201216, as a temporary workaround, conside...

PT-2022-23402 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered via the command parameter in the setTracerouteCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

PT-2022-24089 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the startIp parameter in the formSetPPTPServer function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider restricting access to the...

PT-2022-19934 · Snipe · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.0.10 Description: The issue concerns a session fixation problem where the session is not invalidated after a password change. This could potentially allow unauthorized access to user accounts. Recommendation...

PT-2022-20657 · Nortek Linear · Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Nortek Linear eMerge E3-Series devices versions 0.32-09c and earlier Description: The issue allows an attacker to obtain admin credentials stored in /test.txt, which can be used to open a building's doors. This occurs even when default...

PT-2022-23909 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Buffer Overflow that occurs in the sub 42FDE4 function. This function handles POST requests under the "/goform/SetIpMacBind" API endpoint, which is triggered by the sub...

PT-2022-23389 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the ip parameter in the...

PT-2022-23428 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function SetMacAccessMode. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the SetMacAccessMode function a...

PT-2022-4636 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the improper resolution of links before file access, which could allow privilege escalation. This could potentially be exploited by a remote attacker to...