PT-2022-17024 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7055 Description: The issue allows authenticated Privilege Escalation on Integrated products. This occurs because a password field is present in a JSON response. Recommendations: For versions...

PT-2022-13461 · WordPress · Amelia

Name of the Vulnerable Software and Affected Versions: Amelia WordPress plugin versions prior to 1.0.48 Description: The issue allows any customer to send paid test SMS notifications and retrieve sensitive information about the admin, such as email, account balance, and payment history. A malicio...

PT-2022-17978

Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description The issue is related to a local file inclusion LFI vulnerability. This vulnerability can be exploited via the pages parameter. Recommendations For Online Banking System Protect version 1.0,...

PT-2022-17976

Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are accessible via parameters on the user profile, system info, and accounts management pages...

PT-2022-12705 · Emq · Emq X Dashboard

Name of the Vulnerable Software and Affected Versions: EMQ X Dashboard version 3.0.0 Description: The issue concerns username enumeration in the "/api/v3/auth" interface. When a user logs in, the application returns different results depending on whether the account is correct, allowing an attack...

PT-2022-2561

Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.05B03 Description The issue is related to a remote command execution vulnerability. It can be exploited via HTTP POST to get set ccp, allowing a remote attacker to execute arbitrary commands through the Device Name...

PT-2022-17762 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.5 Description: The issue is related to a lack of access control in the component /data/sqldata. Recommendations: For EyouCMS version 1.5.5, consider restricting access to the /data/sqldata component until a patch is...

PT-2022-17371 · Motioneye · Motioneye

Name of the Vulnerable Software and Affected Versions: MotionEye versions 0.42.1 and below Description: The issue allows attackers to access sensitive information via a GET request to "/config/list". To exploit this, a regular user password must be unconfigured. Recommendations: For MotionEye...

PT-2022-13554 · Pimcore · Pimcore/Data-Hub

Name of the Vulnerable Software and Affected Versions: pimcore/data-hub versions prior to 1.2.4 Description: The issue is related to stored Cross-site Scripting XSS in the pimcore/data-hub GitHub repository. This type of attack occurs when an application stores user input data without proper...

PT-2022-18204 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/delAd" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the "/goform/delAd...

PT-2022-18210 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/SetLanInfo" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

PT-2022-12418 · Unknown · Globalprotect-Openconnect

Name of the Vulnerable Software and Affected Versions: GlobalProtect-openconnect versions prior to 2.0.0 Description: The issue is related to incorrect access control in GPService through DBUS and GUI. This allows arbitrary users to start a VPN connection to arbitrary servers. An attacker can hos...

PT-2022-17380 · Taocms · Taocms

Name of the Vulnerable Software and Affected Versions: taocms version 3.0.2 Description: The issue allows attackers to execute code injection via arbitrarily editing the .htaccess file. Recommendations: For taocms version 3.0.2, restrict access to the .htaccess file to prevent arbitrary edits and...

PT-2022-17285 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A buffer overflow issue was discovered via the time parameter in the saveparentcontrolinfo function. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...

PT-2022-6718 · Adobe · Acrobat 2020 +2

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 17.012.30205 and earlier Adobe Acrobat Reader DC versions 20.005.3031x and earlier Adobe Acrobat Reader DC versions 22.001.20085 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat 202...

PT-2022-17333 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: CuppaCMS version 1.0 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the saveConfigData function in the /classes/ajax/Functions.php file. Recommendations: For CuppaCMS version 1.0, as a...

PT-2022-18175 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the static IP settings function. This vulnerability allows attackers to execute arbitrary commands via a crafted request, specifically throu...

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

PT-2022-18173 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the upnp function via the upnp ttl parameter. This allows attackers to execute arbitrary commands via a crafted request. Recommendations: Fo...

PT-2022-18179 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: A command injection issue was found in the ddns function, allowing attackers to execute arbitrary commands via a crafted request. The vulnerability is exploited through the ddns name, ddns pwd, h ddns,...