PT-2022-22086

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.92.0 Description The issue allows actors to cause a Denial of Service DoS by inserting large characters into the input field New Project on the create field via a crafted HTTP request. Recommendations For versions...

PT-2022-25406 · Nps · Nps

Name of the Vulnerable Software and Affected Versions: NPS versions prior to 0.26.10 Description: The issue allows for an authentication bypass via constantly generating and sending the Auth key and Timestamp parameters. Recommendations: For versions prior to 0.26.10, update to version 0.26.10 or...

PT-2022-26440 · Generex · Generex Cs141

Name of the Vulnerable Software and Affected Versions: Generex CS141 versions 2.08 through 2.10 Description: The issue allows remote command execution by administrators via a web interface that reaches run update in /usr/bin/gxserve-update.sh. This can occur, for example, via a reverse shell...

PT-2022-26333 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the "/csms/admin/storages/view storage.php?id=" endpoint. This allows for potential exploitation. No information is provided about the...

PT-2022-25855

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639 Description A memory leak was discovered in Bento4 via the AP4 Processor::Process function in the mp4encrypt binary. Recommendations For version 1.6.0-639, consider restricting the use of the AP4 Processor::Process...

PT-2022-34668 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to an out of bounds access in the snd emu10k1 pcm channel alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

Vulnerabilities found in GE Cimplicity

The Zero Day Initiative has published information about vulnerabilities in GE's Cimplicity have been published. The vulnerabilities occur during the processing of CIM files. Due to lack of proper initialization of the pointer, a malicious party can execute arbitrary code execute arbitrary code...

PT-2022-7073 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue is related to an open redirect in the shib logout.php script, specifically with the handling of the return parameter. This could allow a remote attacker to redirect users to an arbitrary URL...

PT-2022-25872 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project via the id parameter at the "/phpinventory/editcategory.php" API endpoint. This allows for potential exploitation. Recommendations:...

PT-2022-25398 · Totolink · Totolink A860R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A860R version 4.1.2cu.5182 B20201027 Description: The issue is related to a command injection via the component "/cgi-bin/downloadFile.cgi". This allows for potential malicious commands to be executed. Recommendations: For TOTOLINK...

PT-2022-25397 · Zkbio · Zkbio Time

Name of the Vulnerable Software and Affected Versions: ZKBio Time version 8.0.7 Description: A CSV injection issue allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module. Recommendations: For version 8.0.7, consider...

PT-2022-7187 · Labstack +1 · Labstack Echo +1

Name of the Vulnerable Software and Affected Versions: Labstack Echo version 4.8.0 Description: The issue is related to an open redirect vulnerability via the Static Handler component, which can be leveraged by attackers to cause a Server-Side Request Forgery SSRF. This allows a remote attacker t...

PT-2022-23762 · Isams · Isams

Name of the Vulnerable Software and Affected Versions: ISAMS version 22.2.3.2 Description: The issue allows an attacker to perform a stored Cross-site Scripting XSS attack by injecting a JavaScript payload into the title field for groups. This payload will be executed when another user uses the...

PT-2022-7075 · Unknown · Backdrop Cms

Name of the Vulnerable Software and Affected Versions: Backdrop CMS version 1.23.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability in Backdrop CMS. This vulnerability can be exploited via Post content, allowing a remote attacker to conduct cross-site scripting...

CVE-2022-3053

Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted HTML page...

PT-2022-25623 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the picture upload point of the "save event" file of the "Events" module in the background management system. This vulnerability ...

PT-2022-6973 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: The issue is related to the SetHostIPv6Settings function of the D-Link DAP-1325 wireless signal amplifier's firmware, which does not properly neutralize special elements. This allow...

PT-2022-20036 · WordPress · Bitcoin / Altcoin Faucet Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Bitcoin / Altcoin Faucet WordPress plugin versions prior to 1.6.1 Description: The issue concerns a lack of CSRF check when saving settings, allowing an attacker to make a logged-in admin change them via a CSRF attack. Additionally, due to th...

PT-2022-25197 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tour/admin/update payment.php" API endpoint...

PT-2022-25225 · Unknown · Online Banking System

Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the search parameter at the "/net-banking/manage customers.php" API endpoint. Recommendations: For...