PT-2024-24494 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions v15.03.05.18 through v15.03.20 multi Description: The issue is a stack overflow vulnerability. It is located via the PPW parameter in the fromWizardHandle function. Recommendations: For versions v15.03.05.18, v15.03.05.19,...

PT-2024-24488 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 Tenda W30E version 1.0.1.25633 Description: The issue is a stack overflow vulnerability that can be exploited via the page parameter in the fromAddressNat function. This vulnerability affects the firmware of the Tenda...

PT-2024-4305 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: An information disclosure issue exists in Brocade SANnav when instances are configured in disaster recovery mode, allowing authenticated users to access the...

PT-2024-24484 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a stack overflow vulnerability located via the page parameter in the fromVirtualSer function. Recommendations: For Tenda W30E version 1.0 V1.0.1.25633, consider disabling the...

PT-2024-24363 · Kohya Ss · Kohya Ss

Name of the Vulnerable Software and Affected Versions: Kohya ss versions prior to 23.1.5 Description: Kohya ss, a GUI for Kohya's Stable Diffusion trainers, is vulnerable to a command injection in the group images gui.py file. Recommendations: For versions prior to 23.1.5, update to version 23.1....

PT-2024-24200 · Unknown · Gin-Vue-Admin

Name of the Vulnerable Software and Affected Versions: sanluan flipped-aurora gin-vue-admin versions 2.4.x Description: An issue in the Session Expiration component allows an attacker to escalate privileges. Recommendations: For versions 2.4.x, consider restricting access to the Session Expiratio...

PT-2024-3226 · Tenda · Tenda Tx9

Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical issue is related to the function sub 42CB94 in the /goform/SetVirtualServerCfg file, which is associated with a stack-based buffer overflow when handling the list parameter. This can be...

PT-2024-24361 · Kohya Ss · Kohya Ss

Name of the Vulnerable Software and Affected Versions: Kohya ss versions prior to 23.1.5 Description: Kohya ss is a GUI for Kohya's Stable Diffusion trainers. It is vulnerable to a path injection in the common gui.py find and replace function. Recommendations: For versions prior to 23.1.5, update...

PT-2024-24364 · Kohya Ss · Kohya Ss

Name of the Vulnerable Software and Affected Versions: Kohya ss versions prior to 23.1.5 Description: Kohya ss, a GUI for Kohya's Stable Diffusion trainers, is affected by a command injection issue in the git caption gui.py file. Recommendations: For versions prior to 23.1.5, update to version...

PT-2024-22883 · Cskefu · Cskefu

Name of the Vulnerable Software and Affected Versions: cskefu version 7 Description: The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity. Recommendations: For cskefu version 7, consider implementing proper session expirati...

PT-2024-3723 · Oracle +1 · Oracle Graalvm Enterprise Edition +2

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to insufficient protection of internal data in the Compiler component of Oracle GraalVM for JDK a...

PT-2024-24472 · Unknown · Phpgurukul Tourism Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Tourism Management System version 2.0 Description: The issue concerns an unrestricted upload of files with dangerous types via the tms/admin/create-package.php endpoint. When creating a new package, there are no checks for the type...

PT-2024-3199 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: A vulnerability in the MySQL Server product of Oracle MySQL, specifically in the Server: Security: Privileges component, allows a high-privileged attack...

PT-2024-3134 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: The issue is related to a stack-based buffer overflow in the formSetRebootTimer function of the /goform/SetRebootTimer API endpoint. This can be exploited by manipulating the rebootTime argument,...

PT-2024-24431 · Unknown · Bwl Advanced Faq Manager

Name of the Vulnerable Software and Affected Versions: BWL Advanced FAQ Manager versions 2.0.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

PT-2024-3333 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and before Description: The issue is related to a command injection vulnerability via the hnap main function. This vulnerability is associated with the failure to neutralize special elements used in th...

PT-2024-10912 · Mautic +1 · Mautic +1

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.12 Mautic versions prior to 5.0.4 Description: Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access the Mauti...

PT-2024-24354

Name of the Vulnerable Software and Affected Versions NiceGUI versions prior to 1.4.21 Description A local file inclusion is present in the NiceUI leaflet component when requesting resource files under the / nicegui/ version /resources/key/path:path route. As a result, any file on the backend...

PT-2024-13203 · Cobham · Cobham Sailor Vsat Ku

Name of the Vulnerable Software and Affected Versions: Cobham SAILOR VSAT Ku version 164B019 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows a remote attacker to execute arbitrary code via a crafted script to the c set rslog decode function in the acu w...

PT-2024-11537 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.12 Mautic versions prior to 5.0.4 Description: The issue affects logged in users of Mautic, making them vulnerable to an SQL injection vulnerability in the Reports bundle. This vulnerability allows an attacker to...