PT-2023-15654

Name of the Vulnerable Software and Affected Versions Eternal Terminal version 6.2.1 Description The issue concerns world-readable logfiles in etserver and etclient. Recommendations For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent unauthorize...

PT-2023-15568 · Unknown · Tramyardg Hotel-Mgmt-System

Name of the Vulnerable Software and Affected Versions: Tramyardg hotel-mgmt-system version 2022.4 Description: The issue concerns SQL Injection, which can be exploited via the /app/dao/CustomerDAO.php endpoint. This allows for potential unauthorized access or manipulation of data. No information ...

PT-2023-15116 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/ajax.php?action=save queue" API endpoint...

PT-2023-2370 · Imgproxy · Imgproxy

Name of the Vulnerable Software and Affected Versions: imgproxy versions prior to 3.14.0 Description: The issue is related to Cross-site Scripting XSS - Reflected, which can be exploited by a remote attacker to perform inter-site script attacks using a specially crafted svg file. This is due to...

PT-2023-14969 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0.0 Description: The Judging Management System contains a SQL injection issue via the username parameter. This allows for potential exploitation. Recommendations: For Judging Management System version 1.0.0...

PT-2023-14738 · Unknown · Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject maliciou...

PT-2023-14951 · Unknown · Online Student Enrollment System

Name of the Vulnerable Software and Affected Versions: Online Student Enrollment System version 1.0 Description: A cross-site scripting XSS issue in the /admin/register.php component allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

PT-2023-10218 · Unknown · Dobos Domino

Name of the Vulnerable Software and Affected Versions: dobos domino versions prior to 0.1.5524.38553 Description: A critical issue was found in dobos domino, affecting some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection...

PT-2023-1297 · Tp Link · Tp-Link Sg105Pe

Name of the Vulnerable Software and Affected Versions: TP-Link SG105PE versions prior to 1.0 1.0.0 Build 20221208 Description: The issue is related to an authentication bypass vulnerability in the firmware of TP-Link SG105PE switches. This vulnerability is associated with weaknesses in the...

PT-2023-11820 · Ionicabizau · Node-Gry

Name of the Vulnerable Software and Affected Versions: IonicaBizau node-gry versions up to 5.x Description: A critical issue was found, affecting an unknown part of the software, leading to command injection. The estimated number of potentially affected devices worldwide is not available. There i...

PT-2023-10573 · Unknown · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

PT-2023-1069 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

PT-2023-14965 · 72Crm · 72Crm

Name of the Vulnerable Software and Affected Versions: 72crm version 9 Description: The issue is related to an arbitrary file upload vulnerability via the avatar upload function, allowing attackers to execute arbitrary code by uploading a crafted PHP file. Recommendations: For 72crm version 9,...

PT-2023-1110 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2023-15486 · Sourcecodester · Sourcecodester Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Dynamic Transaction Queuing System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /queuing/index.php?page=display&id= endpoint. The id parameter is vulnerable to SQL injection attacks...

PT-2023-12414 · Unknown · 01-Scripts 01-Artikelsystem

Name of the Vulnerable Software and Affected Versions: 01-Scripts 01-Artikelsystem affected versions not specified Description: A problematic issue has been found, affecting an unknown function of the file 01article.php. The manipulation of the argument $ SERVER'PHP SELF' leads to cross-site...

PT-2023-9888 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: simpleSAMLphp versions prior to 1.0 Description: A vulnerability was found in the Information Cards Module and classified as problematic. This issue affects some unknown processing, leading to cross-site scripting. The attack may be initiated...

PT-2023-18531 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions 1.6.3 and below Description: A session fixation attack allows an attacker to hijack a legitimate user session. This issue is related to a flaw in how the online application handles the session ID, particularly in susceptible w...

PT-2023-18530 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions prior to 1.6.4 Description: The issue allows unauthorized access to system API interfaces, potentially leaking sensitive information. This is due to a flaw in how online applications handle routing permissions. There are no...

PT-2023-18532 · Unknown · Kubeoperator

Name of the Vulnerable Software and Affected Versions: KubeOperator versions 3.16.3 and below Description: The issue allows unauthorized access to API interfaces, potentially leaking sensitive information and allowing takeover of the cluster under certain conditions. This is due to a flaw in...