PT-2024-33418 · Tiptoppress · Tiptoppress Hyperlink Group Block

Name of the Vulnerable Software and Affected Versions: TipTopPress Hyperlink Group Block versions 1.17.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-7207 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions prior to 129.0.2792.52 Description: The issue is related to a use-after-free vulnerability in Microsoft Edge, which is based on Chromium. This vulnerability can be exploited by a remote attacker to execu...

PT-2024-33437 · Zoho · Zoho Crm Lead Magnet

Name of the Vulnerable Software and Affected Versions: Zoho CRM Lead Magnet versions 1.7.9.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2024-32940 · Unknown · Restaurant Reservations Widget

Name of the Vulnerable Software and Affected Versions: Restaurant Reservations Widget versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations:...

PT-2024-39475 · Sendpulse · Sendpulse Free Web Push

Name of the Vulnerable Software and Affected Versions: SendPulse Free Web Push plugin for WordPress versions up to, and including, 1.3.6 Description: The issue is related to Stored Cross-Site Scripting due to the incorrect use of the wp kses allowed html function. This allows unauthenticated...

PT-2024-39595 · WordPress · Bulk Images Optimizer

Name of the Vulnerable Software and Affected Versions: The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to a missing capability check on the save configuration function, allowing...

PT-2024-33392 · Sunjianle · Ajax-Extend

Name of the Vulnerable Software and Affected Versions: Sunjianle ajax-extend versions n/a through 1.0 Description: The issue is related to improper control of code generation, allowing code injection. This vulnerability exists in Sunjianle and affects the ajax-extend component. Recommendations: F...

PT-2024-39586 · WordPress · The Forminator Forms

Name of the Vulnerable Software and Affected Versions: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress versions up to, and including, 1.35.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on...

PT-2024-31423 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server version 8.5 Description: The issue is a denial of service vulnerability that can be triggered by an unexpected specially crafted request under certain configurations. A remote attacker could exploit this to...

PT-2024-33165 · Domainmod · Domainmod

Name of the Vulnerable Software and Affected Versions: DomainMOD versions prior to 4.12.0 Description: A reflected Cross Site Scripting XSS issue is present in the segmentsedit.php file. The segid parameter in the GET request can be exploited to cause this issue. Recommendations: For versions pri...

PT-2024-7387 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions before build 38690 Description: The issue is related to sensitive information manipulation due to improper authorization. This can be exploited by an attacker to elevate their privileges. The vulnerability...

PT-2024-7156 · Splunk · Splunk Cloud Platform +1

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.3.1 Splunk Enterprise version 9.2.0 through 9.2.3 Splunk Cloud Platform versions prior to 9.2.2403.103 Splunk Cloud Platform versions 9.1.2312.200 through 9.1.2312.110 Splunk Cloud Platform version...

PT-2024-33057 · Wavelog · Wavelog

Name of the Vulnerable Software and Affected Versions: Wavelog version 1.8.5 Description: The issue is an SQL injection vulnerability in the Activated gridmap model.php file. This vulnerability can be exploited through the band, sat, propagation, or mode variables. Recommendations: For Wavelog...

PT-2024-33240 · Unknown · Automatic Systems Maintenance Slimlane

Name of the Vulnerable Software and Affected Versions: Automatic Systems Maintenance SlimLane version 29565 d74ecce0c1081d50546db573a499941b10799fb7 Description: The issue allows a remote attacker to escalate privileges via the FtpConfig.php page. This can grant unauthorized access, potentially...

PT-2024-33239 · Unknown · Automatic Systems Maintenance Slimlane

Name of the Vulnerable Software and Affected Versions: Automatic Systems Maintenance SlimLane 29565 d74ecce0c1081d50546db573a499941b10799fb7 Description: A Cross Site Scripting XSS vulnerability allows a remote attacker to escalate privileges via the FtpConfig.php component. This issue enables an...

PT-2024-39920 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue was found in the reset.php file, where the manipulation of the useremail argument leads to sql injection. This allows for remote attacks. The exploit has been disclosed...

PT-2024-33237 · Taskmatic · Taskmatic

Name of the Vulnerable Software and Affected Versions: taskmatic version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the admin id parameter of the "/update-employee.php" API endpoint. Recommendations: For taskmatic version 1.0, consider disabling the...

PT-2024-39854 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue has been identified, affecting the delete product function in the /classes/Master.php?f=delete product file. The manipulation of the id argument leads to SQL...

PT-2024-39704 · WordPress · Linkz.Ai

Name of the Vulnerable Software and Affected Versions: Linkz.ai plugin for WordPress versions up to, and including, 1.1.8 Description: The issue allows unauthorized modification of data due to a missing capability check on the ajax linkz function. This makes it possible for authenticated attacker...

PT-2024-39484 · Unknown · Seur Plugin

Name of the Vulnerable Software and Affected Versions: SEUR plugin versions prior to 2.5.11 Description: The SEUR plugin is vulnerable to time-based SQL injection through the use of the id order parameter of the "/modules/seur/ajax/saveCodFee.php" endpoint. This issue affects versions prior to...