CVE-2023-30549 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer

Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer 1.1.0 and installations that include apptainer-suid 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterpri...

PT-2023-19355 · WordPress · Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin

Name of the Vulnerable Software and Affected Versions: Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin versions = 2.5.3 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inje...

PT-2023-20486 · Telindus · Telindus Apsal

Name of the Vulnerable Software and Affected Versions: Telindus Apsal version 3.14.2022.235 b Description: An issue was discovered in the consultation permission, which is insecure. Recommendations: For Telindus Apsal version 3.14.2022.235 b, consider restricting access to the consultation...

PT-2023-22681 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 1a2c047 Description: A stack overflow issue was discovered in Jerryscript via the vm loop component at /jerry-core/vm/vm.c. Recommendations: For Jerryscript version 1a2c047, consider restricting access to the vm loop...

PT-2023-22444 · Unknown · Bang Resto

Name of the Vulnerable Software and Affected Versions: Bang Resto version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the itemName parameter in the admin/menu.php Add New Menu function. Recommendations: For Bang...

PT-2023-15809 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 2.3.0 Description: The issue allows path traversal in the resolveResource method. Recommendations: For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround,...

PT-2023-17197 · Meinberg · Meinbergs Ltos

Name of the Vulnerable Software and Affected Versions: Meinbergs LTOS versions prior to V7.06.013 Description: The configuration file upload function in Meinbergs LTOS does not correctly validate input, allowing a remote authenticated attacker with high privileges to execute arbitrary commands...

PT-2023-22825 · Kiwi Tcms · Kiwitcms/Kiwi +1

Name of the Vulnerable Software and Affected Versions: kiwitcms/Kiwi versions 12.2 and prior kiwitcms/enterprise versions 12.2 and prior Description: The changelog.yml workflow in Kiwi TCMS is vulnerable to command injection attacks due to the use of an untrusted github.head ref field. The...

PT-2023-13996 · Unknown · Shareaholic Similar Posts

Name of the Vulnerable Software and Affected Versions: Shareaholic Similar Posts plugin versions 3.1.6 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts into t...

HackerOne: Banned user still able to invited to reports as a collabrator and reset the password

A security vulnerability allowed a permanently banned user to still be invited as a collaborator to reports and reset their password, despite being restricted from accessing any account features or reports...

PT-2023-18631 · WordPress · Trinitronic Nice Paypal Button Lite

Name of the Vulnerable Software and Affected Versions: TriniTronic Nice PayPal Button Lite plugin versions 1.3.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintend...

PT-2023-16084 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5 affected versions not specified NVIDIA ConnectX-6 affected versions not specified NVIDIA ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC...

PT-2023-18380 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A vulnerability was found in the processing of the file /classes/Users.php, where the manipulation of the argument id leads to cross-site scripting. The attack may be initiated...

PT-2023-22474 · H3C · H3C Magic R200

Name of the Vulnerable Software and Affected Versions: H3C Magic R200 version R200V100R004 Description: A stack overflow issue was discovered via the go parameter at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R200 device. Recommendations: For H3C Magic R200 version...

PT-2023-15533 · Tss-Lib +1 · Tss-Lib +1

Name of the Vulnerable Software and Affected Versions: tss-lib versions prior to 2.0.0 Description: An issue was discovered in the tss-lib library, where the parameter ssid for defining a session id is not used through the MPC implementation. This makes replaying and spoofing of messages easier, ...

PT-2023-21286 · Ego Studio · Ego Studio Superclean

Name of the Vulnerable Software and Affected Versions: Ego Studio SuperClean versions 1.1.5 through 1.1.9 Description: An issue in Ego Studio SuperClean allows an attacker to gain privileges and cause a denial of service via the update info field of the default .xml file. Recommendations: For...

Linux Kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in Linux Kernel version 6.2, which stems from a common IBRS being enabled that makes userspace processes vulnerable...

PT-2023-12984 · Onos · Onos

Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered in ONOS where an intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading ...

PT-2023-21731 · Pretalx · Pretalx

Name of the Vulnerable Software and Affected Versions: pretalx versions 2.3.1 through 2.3.1 Description: The issue allows path traversal in HTML export, a non-default feature. Organizers can trigger the overwriting of an arbitrary file with the standard pretalx 404 page content. Recommendations:...

PT-2023-2483 · Inea · Inea Me Rtu

Name of the Vulnerable Software and Affected Versions: INEA ME RTU versions prior to 3.36 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This could allow a remote attacker to execute arbitrary code. The estimated numb...