PT-2024-26473 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: A stack overflow issue was discovered via the http host parameter in the loginAuth function. Recommendations: For TOTOLINK LR350 version 9.3.5u.6369 B20220309, as a temporary workaroun...

PT-2024-3884 · Automationdirect · P3-550E

Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9 Description: The issue is related to out-of-bounds write vulnerabilities in the Programming Software Connection FileSystem API functionality. Specially crafted network packets can lead to heap-based...

PT-2024-40216 · Silverstripe · Silverstripe

Name of the Vulnerable Software and Affected Versions: SilverStripe forms affected versions not specified Description: The issue concerns form fields in SilverStripe forms that return isReadonly as true, making them vulnerable to reflected XSS injections. This includes fields like ReadonlyField,...

PT-2024-26252 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the my index parameter in the "/view/find friends.php" API endpoint. Recommendations...

PT-2024-3879 · Automationdirect · Automationdirect P3-550E

Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality. Specially crafted network packets can lead to heap-based memory...

PT-2024-26312 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the findPage function in SysLoginInfoMapper.xml. This allows for potential exploitation. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to...

PT-2024-22890 · Xmedcon · Xmedcon

Name of the Vulnerable Software and Affected Versions: xmedcon versions 0.23.0 Description: The issue allows an attacker to execute arbitrary code via a Buffer Overflow in libs/dicom/basic.c. Recommendations: For xmedcon version 0.23.0, update to version 0.24.0 to resolve the issue. As a temporar...

PT-2024-26483 · Webid · Webid

Name of the Vulnerable Software and Affected Versions: WeBid version 1.1.2 Description: The issue is related to SQL Injection via the admin/tax.php endpoint. This allows for potential unauthorized access to database information. Recommendations: For WeBid version 1.1.2, as a temporary workaround,...

PT-2024-4401 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 15.11 through 16.10.5 GitLab versions 16.11 through 16.11.2 GitLab versions 17.0 through 17.0.0 Description: A cross-site scripting XSS condition exists within GitLab. By leveraging this condition, an attacker can craft a...

PT-2024-4193 · Tp Link · Tp-Link Tether +1

Name of the Vulnerable Software and Affected Versions: TP-Link Tether versions prior to 4.5.13 TP-Link Tapo versions prior to 3.3.6 Description: The issue is related to errors in the certificate authentication procedure, which may allow a remote attacker to perform a man-in-the-middle MITM attack...

PT-2024-5352 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.11.3 Argo CD versions prior to 2.10.12 Argo CD versions prior to 2.9.17 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enumerate...

PT-2024-34520 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view/student payment history.php. The manipulation of the index...

PT-2024-34603 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 1.0 Description: A critical issue affects the processing of the file /admin/index.php, where the manipulation of the username argument leads to SQL injection. The attack can be initiated remotely...

PT-2024-34495 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view/student first payment.php. The manipulation of the grade argume...

PT-2024-20630 · Codepeople · Codepeople Cp Polls

Name of the Vulnerable Software and Affected Versions: CodePeople CP Polls versions 1.0.71 and earlier Description: The issue is related to an Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS, which allows Code Injection. This means that an attacker could...

PT-2024-11989

Name of the Vulnerable Software and Affected Versions MainWP Code Snippets Extension versions n/a through 4.0.2 Description The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability in the MainWP Code Snippets Extension, allowing Code Injection. This...

PT-2024-25996 · Sunhillo · Sunhillo Sureline

Name of the Vulnerable Software and Affected Versions: Sunhillo SureLine versions through 8.10.0 Description: The issue allows for cgi/usrPasswd.cgi userid change XSS within the Forgot Password feature. This can be exploited through the /cgi/usrPasswd.cgi endpoint, specifically targeting the user...

PT-2024-26242 · Flyfish · Flyfish

Name of the Vulnerable Software and Affected Versions: FlyFish version 3.0.0 Description: The issue is a buffer overflow via the password parameter on the login page, allowing attackers to cause a Denial of Service DoS via a crafted input. This can potentially lead to system compromise...

PT-2024-3654 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.60 Description: The issue is related to a use after free in the Dawn component, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could be achieved throu...

PT-2024-5068 · Roku · Roku Indoor Camera Se

Name of the Vulnerable Software and Affected Versions: Kalay SDK versions affected versions not specified Owlet Cam version affected versions not specified Owlet Cam v1 Owlet Cam v2 Wyze Cam v3 Roku Indoor Camera SE Description: The issue is related to insufficient authentication of received data...