PT-2023-16935 · Xhcms · Xhcms

Name of the Vulnerable Software and Affected Versions: XHCMS version 1.0 Description: A critical issue has been found in the POST Parameter Handler component of the login.php file, where the manipulation of the user argument leads to SQL injection. This issue can be initiated remotely...

PT-2023-16932 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/ajax.php. The manipulation of the username argument leads to SQL injection...

PT-2023-16925 · Sourcecodester · Sourcecodester Gadget Works Online Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gadget Works Online Ordering System version 1.0 Description: A critical issue was found in the component POST Parameter Handler, affecting an unknown part of the file /philosophy/admin/login.php. The manipulation of the user...

PT-2023-18411 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.5 Description: The kernel subsystem hmdfs has an arbitrary memory accessing issue, allowing network attackers to launch a remote attack and obtain kernel memory data of the target system. Recommendations: For...

PT-2023-20045 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was discovered in the router, specifically via the ou parameter at the "/setting/delStaticDhcpRules" API endpoint. This allows for potential exploitation...

PT-2023-20868 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the Title parameter under the Adding Categories module. Recommendations: For onekeyadmin...

PT-2023-19772 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/databases/database/list" API endpoint. Recommendations: For Funadmin version 3.2.0,...

PT-2023-3361 · Tp Link · Tp-Link Tl-Wa7510N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WPA7510 EU version V2 190125 Description: The issue is related to a stack overflow via the operation parameter at the "/admin/locale" API endpoint. This can be exploited by a remote attacker to execute arbitrary commands. The...

PT-2023-20493 · Dot-Lens · Dot-Lens

Name of the Vulnerable Software and Affected Versions: dot-lens versions all Description: The issue concerns Prototype Pollution via the set function in the index.js file. This affects all versions of the dot-lens package. There is no information provided about the estimated number of potentially...

PT-2023-19757 · Pmb · Pmb

Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: A reflected cross-site scripting XSS issue was found in PMB via the query parameter at "/admin/convert/export z3950 new.php". This allows for potential XSS attacks. Recommendations: For PMB version 7.4.6, consid...

PT-2023-15916 · Icplayer · Icplayer

Name of the Vulnerable Software and Affected Versions: icplayer versions up to 0.818 Description: A vulnerability was found in icplayer, affecting some unknown functionality of the file addons/Commons/src/tts-utils.js. The manipulation leads to cross site scripting. The attack may be launched...

PT-2023-2087 · Ecshop · Ecshop

Name of the Vulnerable Software and Affected Versions: ECshop versions up to 4.1.8 Description: A vulnerability was found in the New Product Handler component of ECshop, allowing for unrestricted file upload. This can be exploited remotely, potentially allowing an attacker to upload arbitrary...

PT-2023-15915 · Icplayer · Icplayer

Name of the Vulnerable Software and Affected Versions: icplayer versions up to 0.819 Description: A vulnerability was found in icplayer, affecting the function AddonText Selection create of the file addons/Text Selection/src/presenter.js. This issue leads to cross-site scripting and can be launch...

PT-2023-19760 · Pmb · Pmb

Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: A remote code execution RCE issue was discovered in PMB via the component /sauvegarde/restaure act.php. Recommendations: For PMB version 7.4.6, as a temporary workaround, consider restricting access to the...

PT-2023-9859 · WordPress · Subscribe To Comments Plugin

Name of the Vulnerable Software and Affected Versions: Subscribe to Comments Plugin versions up to 2.0.7 Description: A problematic vulnerability was found in the Subscribe to Comments Plugin, affecting an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site...

PT-2023-9206 · Frrouting +9 · Frrouting +9

Name of the Vulnerable Software and Affected Versions: FRRouting versions prior to 8.5 Description: The issue is related to the bgpd/bgp label.c file in FRRouting, which attempts to read beyond the end of the stream during labeled unicast parsing. This can be exploited by a remote attacker to cau...

PT-2023-4572 · Mongodb · Mongodb Server +1

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions 4.4 through 6.3 MongoDB Server versions 5.0.0 through 5.0.14 Description: The issue is related to incorrect client certificate validation when the MongoDB Server is configured to use TLS with specific configuration...

PT-2023-11912 · Ibm · Ibm Financial Transaction Manager

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager versions 3.2.0 through 3.2.7 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing "dot dot" sequences /../ to view...

PT-2023-16763 · Unknown · Drag/Drop Multiple File Upload – Contact Form 7

Name of the Vulnerable Software and Affected Versions: Drag and Drop Multiple File Upload Contact Form 7 version 5.0.6.1 Description: A critical issue has been found, affecting an unknown function of the file admin-ajax.php. The manipulation of the upload name argument leads to relative path...

PT-2023-1536

Name of the Vulnerable Software and Affected Versions Cisco IP Phone versions prior to the fixed version Description Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denia...