PT-2024-17556 · Guangzhou Huayi Intelligent Technology · Jeewms

Name of the Vulnerable Software and Affected Versions: Guangzhou Huayi Intelligent Technology Jeewms version 1.0.0 Description: A critical issue affects the Druid Monitoring Interface component, specifically the file /jeewms war/webpage/system/druid/index.html, leading to improper authorization...

PT-2024-17562 · Sourcecodester · Sourcecodester Phone Contact Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Contact Manager System version 1.0 Description: The issue is related to insufficient input validation, which can allow an attacker to execute arbitrary code. It affects the function UserInterface::MenuDisplayStart of the...

PT-2024-17356 · WordPress · 워드프레스 결제 심플페이 – 우커머스 결제 플러그인

Name of the Vulnerable Software and Affected Versions: 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress versions up to, and including, 5.2.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

PT-2024-35919 · Brandtoss · Wp Mailster

Name of the Vulnerable Software and Affected Versions: WP Mailster versions 1.8.16.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in brandtoss WP Mailster, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2024-36094

Name of the Vulnerable Software and Affected Versions: ARForms versions n/a through 6.4.1 Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which affects Repute InfoSystems ARForms. This allows for Path Traversal. Recommendations: For...

PT-2024-16921 · WordPress · Smart Popup Blaster

Name of the Vulnerable Software and Affected Versions: Smart PopUp Blaster plugin for WordPress versions up to, and including, 1.4.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'spb-button' shortcode due to insufficient input sanitization and output escaping ...

PT-2024-35911 · Unknown · Beaver Builder

Name of the Vulnerable Software and Affected Versions: Beaver Builder versions through 2.8.4.3 Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...

PT-2024-36091 · WordPress · Wordpress Page Builder – Zion Builder

Name of the Vulnerable Software and Affected Versions: WordPress Page Builder – Zion Builder versions 3.6.12 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, where an...

PT-2024-9186 · Abb · Abb Aspect +2

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: The issue is related to Denial of Service vulnerabilities, which could potentially cause device service disruptions. It is...

PT-2024-9243 · Documenso · Documenso

Name of the Vulnerable Software and Affected Versions: Documenso versions through 1.8.0 Documenso SaaS Hosted as of 2024-12-05 Description: The issue is related to the User Interface UI Misrepresentation of Critical Information in Documenso, allowing Content Spoofing. The displayed version does n...

PT-2024-27792 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is a buffer overflow that occurs via the nav2 amcl process. This is triggered by sending a crafted .yaml file. Recommendations: For Open Robotics...

PT-2024-35743 · Whapa · Whapa

Name of the Vulnerable Software and Affected Versions: whapa version 1.59 Description: The issue concerns command injection via a crafted filename in the HTML reports component. This allows for potential exploitation through manipulated file names. Recommendations: For whapa version 1.59, conside...

PT-2024-17478 · Unknown · 1000 Projects Library Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Library Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Library Management System, affecting an unknown function of the file /showbook.php. The manipulation of the q argument leads...

PT-2024-17472 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.116 Description: A vulnerability has been found in DedeCMS, affecting an unknown function of the file /member/article add.php. The manipulation of the body argument leads to cross-site scripting. It is possible to launch t...

PT-2024-16954 · WordPress · Advanced File Manager

Name of the Vulnerable Software and Affected Versions: Advanced File Manager plugin for WordPress versions up to and including 5.2.10 Description: The issue arises from missing file type validation via the 'class fma connector.php' file, allowing authenticated attackers with Subscriber-level acce...

PT-2024-32986 · Aedes · Aedes

Name of the Vulnerable Software and Affected Versions: aedes version 0.51.2 Description: An issue in aedes allows attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For aedes version 0.51.2, consider restricting access to the service to minimize the risk of...

PT-2024-9571 · Ruijie · Ruijie Reyee Os

Name of the Vulnerable Software and Affected Versions: Ruijie Reyee OS versions 2.206.x through 2.320.x Description: The issue is related to the Ruijie MQTT broker in Ruijie Reyee OS, where an attacker could subscribe to partial possible topics and receive partial messages being sent to and from...

PT-2024-35902 · Advance · Advanced

Name of the Vulnerable Software and Affected Versions: Advanced What should we write next about versions n/a through 1.0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions o...

PT-2024-35837 · Unknown · Plumeria Web Design Blizzard Quotes

Name of the Vulnerable Software and Affected Versions: Plumeria Web Design Blizzard Quotes versions n/a through 1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can perform unauthorized actions on the website. The estimat...

PT-2024-35869 · Unknown · Arca Payment Gateway

Name of the Vulnerable Software and Affected Versions: ArCa Payment Gateway versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicio...