PT-2023-24930 · Prestashop +1 · Opartsavecart +1

Name of the Vulnerable Software and Affected Versions: PrestaShop opartsavecart versions through 2.0.7 Description: The issue allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent and...

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts, and product image scaling. A security vulnerability exists in PrestaShop opartsavecart 2.0.7 and earlier versions, which originated from...

CVE-2023-36109

CVE-2023-36109 affects JerryScript 3.0; the vulnerability is a buffer overflow in ecma_stringbuilder_append_raw (/jerry-core/ecma/base/ecma-helpers-string.c) that can allow remote code execution. Several connected sources document unpatched status in Linux distributions (no vendor patch available...

ROS-20230920-03

A vulnerability in the WebP image display module of the Google Chrome browser is related to reading outside the boundaries of the buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

CVE-2023-41443

SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-40955

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management aka pdm v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the select parameter in models/baseclient.py componen...

The vulnerability of the Metabase data visualization and reporting software, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

CVE-2023-40397

A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and...

[SECURITY] Fedora 37 Update: salt-3005.2-1.fc37

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

The vulnerability of the set_qos function in the Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Fedora: Security Advisory for salt (FEDORA-2023-ac1aa963e4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of TP-Link Archer C20, Archer C55, and Archer C50 router microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of TP-Link Archer C20, Archer C55, and Archer C50 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the set_l2tp function in the microprogramming software for the Milesight UR32L router allows a hacker to execute arbitrary code.

The vulnerability of the setl2tp function in the microprogramming software for the Milesight UR32L router is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

FreeBSD : vscode -- VS Code Remote Code Execution Vulnerability (4bc66a81-89d2-4696-a04b-defd2eb77783)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4bc66a81-89d2-4696-a04b-defd2eb77783 advisory. - Visual Studio Code Remote Code Execution Vulnerability CVE-2023-36742 Note that Nessus has not tested...

The vulnerability of ASUS RT-AX55 router’s microprogramming software lies in insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of ASUS RT-AX55 router’s microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Pixel & tonic Craft CMS Code Injection Vulnerability

Pixel & tonic Craft CMS is a content management system CMS from the US-based Pixel & tonic, Inc. A code injection vulnerability exists in Pixel & tonic Craft CMS versions prior to 4.4.15, which stems from the presence of a remote code execution vulnerability...

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder is a tool for creating models and 3D printing from Microsoft. A remote code execution vulnerability exists in Microsoft 3D Builder, which can be exploited by an attacker to execute arbitrary code on a system...