PT-2024-2873 · Nvidia · Nvidia Chatrtx

Name of the Vulnerable Software and Affected Versions: NVIDIA ChatRTX for Windows versions 0.2 and earlier Description: The issue is related to a lack of protection for the web page structure in the user interface of NVIDIA ChatRTX for Windows, allowing for potential cross-site scripting errors...

PT-2024-21241 · Dell · Dell Grab For Windows

Name of the Vulnerable Software and Affected Versions: Dell Grab for Windows versions 5.0.4 and below Description: The issue concerns a cleartext storage of sensitive information in the appsync module. An authenticated local attacker could potentially exploit this, leading to information disclosu...

PT-2024-13025 · Win Zapp · Win Zapp

Name of the Vulnerable Software and Affected Versions: Win ZApp versions prior to 4.3.0.121 Description: The issue is related to a missing password type validation in the Revert Password check. This could be disabled for some features, potentially leading to security issues. Recommendations: For...

PT-2024-22225 · Webproxy · Webproxy

Name of the Vulnerable Software and Affected Versions: WebProxy versions 1.7.8 through 1.7.9 Description: An OS command injection issue exists, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Recommendations: For...

PT-2024-22226 · Unknown · Mini Thread

Name of the Vulnerable Software and Affected Versions: Mini Thread version 3.33βi Description: A cross-site scripting issue exists, allowing an arbitrary script to be executed on the web browser of the user accessing the website that uses the product. The developer was unreachable, and users are...

PT-2024-22852 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: The issue is related to SQL Injection via the update-admin.php endpoint, specifically through the admin id parameter. This allows for potential exploitation. No information is...

PT-2024-2396 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ version 3.2.5 Description: A SQL injection vulnerability has been discovered in the "Add News" functionality due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit FAQ news to...

PT-2024-10973 · Unknown +1 · Aops-Ceres +1

Name of the Vulnerable Software and Affected Versions: openEuler aops-ceres versions 1.3.0 through 1.4.1 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This problem is...

PT-2024-23090 · Logpoint · Logpoint

Name of the Vulnerable Software and Affected Versions: Logpoint versions prior to 7.1.0 Description: The issue allows Self-XSS on the LDAP authentication page via the username to the LDAP login form. Recommendations: For versions prior to 7.1.0, update to version 7.1.0 or later to resolve the...

PT-2024-22867 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: DIR-845L router firmware version = 1.01KRb03 Description: A command injection issue exists in the cgibin binary. Recommendations: For DIR-845L router firmware version = 1.01KRb03, update to a version greater than 1.01KRb03 to resolve the issu...

PT-2024-21941 · Sourcecodester · Sourcecodester Complete E-Commerce Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Complete E-Commerce Site version 1.0 Description: A critical vulnerability has been found in the SourceCodester Complete E-Commerce Site, affecting an unknown function of the file /admin/users photo.php. The manipulation of the...

PT-2024-23100

Name of the Vulnerable Software and Affected Versions Sentrifugo version 3.2 Description The issue is related to a SQL injection vulnerability. It affects the "/sentrifugo/index.php/reports/activitylogreport" API endpoint, specifically the sortby parameter. This could allow a remote user to send ...

PT-2024-22013 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A problematic vulnerability has been found in the system, affecting the /user/search.php file. The issue is related to the manipulation of the searchdata argument, leading...

PT-2024-22029 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/application-bwdates-reports-details.php. The manipulation of the...

PT-2024-23095 · Unknown · Sentrifugo

Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: The issue is related to a SQL injection vulnerability. It could allow a remote user to send a specially crafted query to the server and extract all the data from it. The vulnerability is exploited through t...

PT-2024-3990

Name of the Vulnerable Software and Affected Versions Progress Telerik Report Server versions 2024 Q1 10.0.24.305 or earlier Description The issue is related to an authentication bypass vulnerability in Progress Telerik Report Server, allowing an unauthenticated attacker to gain access to...

PT-2024-2352 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: The issue is related to a stack-based buffer overflow in the formexeCommand function of the /goform/execCommand file. This can be exploited by manipulating the cmdinput argument, potentially allowi...

PT-2024-22917 · Oneblog · Oneblog

Name of the Vulnerable Software and Affected Versions: OneBlog version 2.3.4 Description: A stored cross-site scripting XSS issue was found in the Notice Manage module. This allows for malicious scripts to be stored and executed on the site, potentially leading to unauthorized actions or data...

PT-2024-21734 · Unknown · Campcodes Complete Online Dj Booking System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online DJ Booking System version 1.0 Description: A problematic issue was found in the system, affecting an unknown functionality of the file /admin/aboutus.php. The manipulation of the pagetitle argument leads to cross-sit...

PT-2024-12882 · Unknown · Openclinic Ga

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.247.01 Description: An issue was discovered in OpenClinic GA, allowing an attacker to perform a directory path traversal via the Page parameter in a GET request to the "main.do" endpoint. Recommendations: For OpenClini...