PT-2024-17287 · Nsasoft · Nsasoft Network Sleuth

Name of the Vulnerable Software and Affected Versions: Nsasoft Network Sleuth version 3.0.0.0 Description: A vulnerability was found in the Registration Handler component of Nsasoft Network Sleuth, which can lead to denial of service. The issue can be exploited locally. Recommendations: For Nsaso...

PT-2024-17299 · Munsoft · Munsoft Easy Archive Recovery

Name of the Vulnerable Software and Affected Versions: Munsoft Easy Archive Recovery version 2.0 Description: A problematic vulnerability was found in the Registration Key Handler component, leading to denial of service. The attack must be approached locally. The exploit has been disclosed to the...

Nsasoft NBMonitor Network Bandwidth Monitor Security Vulnerability

Nsasoft NBMonitor Network Bandwidth Monitor is a network bandwidth monitor from Nsasoft, USA. A security vulnerability exists in Nsasoft NBMonitor Network Bandwidth Monitor version 1.6.5.0, which originates from the component Registration Handler that can cause a denial of service...

Munsoft Easy Outlook Express Recovery Security Vulnerability

Munsoft Easy Outlook Express Recovery is a special program from Munsoft that recovers corrupted DBX files. A security vulnerability exists in Munsoft Easy Outlook Express Recovery version 2.0, which originates from the component Registration Key Handler that causes a denial of service...

CVE-2023-51509

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Reflected XSS.This issue affects RegistrationMagic – Custom Registration Forms, User...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Reflected XSS.This issue affects RegistrationMagic – Custom Registration Forms, User...

CVE-2024-22158

CVE-2024-22158 affects PeepSo Community: Photos plugin (

Security Bulletin: IBM Maximo Asset Management could allow a remote attacker to bypass authentication due to improper access controls (CVE-2023-32333)

Summary IBM Maximo Asset Management could allow a remote attacker to bypass authentication due to improper access controls CVE-2023-32333. This only impacts environments using native Maximo security when security options have been incorrectly applied to the MAXREG user. Vulnerability Details...

CVE-2024-0879

Authentication bypass in vector-admin allows a user to register to a vector-admin server while “domain restriction” is active, even when not owning an authorized email address...

CVE-2024-0879

Authentication bypass in vector-admin allows a user to register to a vector-admin server while “domain restriction” is active, even when not owning an authorized email address...

Patch now! Fortra GoAnywhere MFT vulnerability exploit available

On January 22, 2024, software company Fortra warned customers about a new authentication bypass vulnerability impacting GoAnywhere MFT Managed File Transfer that allows an attacker to create a new admin user. Fortra GoAnywhere MFT is a file transfer solution that organizations use to exchange the...

VectorAdmin Authorization Issues Vulnerability

VectorAdmin is a generalized suite of tools for vector database administration. VectorAdmin suffers from an authorization issue vulnerability that stems from the inclusion of an authentication bypass in vector-admin that allows a user to register to vector-admin while domain restriction is active...

The vulnerability of the Find My function in macOS, iOS, and iPadOS allows a perpetrator to disclose protected information.

The vulnerability of the Find My function in macOS, iOS, and iPadOS relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the RapidDiag diagnostic tool on the Splunk Enterprise operating environment allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the RapidDiag diagnostic tool for the Splunk Enterprise operating environment is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-35837

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

PT-2024-12514 · Solax · Solax Pocket Wifi

Name of the Vulnerable Software and Affected Versions: SolaX Pocket WiFi versions 3 through 3.001.02 Description: An issue was discovered where authentication for the web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default passwor...

The vulnerability of the Sandbox component of the macOS operating system, which allows a violator to disclose protected information

The vulnerability of the Sandbox component in the macOS operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a hacker to disclose protected information...

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that should be protected...