CVE-2009-1143

A vulnerability was found in open-vm-tools. This flaw allows local users to bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs aka hgfsmounter...

PT-2023-12687 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1 Description: The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in t...

CVE-2023-0046

CVE-2023-0046 relates to the daloradius project: prior to the master-branch, there is an issue with improper restriction of names for files and other resources due to lack of filename restrictions when saving logging data. An attacker can manipulate the logging filename to point to an existing PH...

PT-2023-15970 · Unknown · Lirantal/Daloradius

Name of the Vulnerable Software and Affected Versions: lirantal/daloradius versions prior to master-branch Description: The issue is related to improper restriction of names for files and other resources. This affects the GitHub repository lirantal/daloradius. Recommendations: For versions prior ...

CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius

Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...

CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius

Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...

PT-2023-12404 · Unknown · Ghostlander Halcyon

Name of the Vulnerable Software and Affected Versions: ghostlander Halcyon versions prior to 1.1.1.0-hal Description: A critical vulnerability has been found in ghostlander Halcyon, affecting the function CBlock::AddToBlockIndex of the file src/main.cpp in the component Block Verification. This...

CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius

Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...

Nextcloud: No password length restriction in reset password endpoint

There was no password length restriction in the reset password endpoint of the Nextcloud platform, which could allow an attacker to perform a denial of service attack by entering a large number of characters as a password. The vulnerability has been mitigated by restricting users to use less than...

Unrestricted Logging Filename Lead to RCE

Description This vulnerability occur because there is no filename restriction for saving logging file. In this case attacker can set the filename to existing php file and append php code on it by manipulating the logged input. Proof of Concept 1. Log in using operator account, in this case i try ...

PT-2023-1011 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 5.4.0 through 5.4.5 FortiADC versions 6.0.0 through 6.0.4 FortiADC versions 6.1.0 through 6.1.6 FortiADC versions 6.2.0 through 6.2.3 FortiADC versions 7.0.0 through 7.0.2 Description: The issue is related to an improper...

Improper Authorization

github.com/usememos/memos is vulnerable to improper authorization. Access restriction bypass via the shortcut endpoint allows an attacker to view, modify, and delete other users' shortcuts...

PT-2023-13620 · WordPress · Visual Email Designer For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Visual Email Designer for WooCommerce WordPress plugin versions prior to 1.7.2 Description: The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL...

PT-2023-10103 · Unknown · Rails-Cv-App

Name of the Vulnerable Software and Affected Versions: rails-cv-app affected versions not specified Description: A problematic issue has been found, affecting some unknown functionality of the file app/controllers/uploaded files controller.rb. The manipulation with the input ../../../etc/passwd...

PT-2023-10101 · Teknet · Teknet

Name of the Vulnerable Software and Affected Versions: kirill2485 TekNet affected versions not specified Description: A problematic issue was found in the software, allowing for cross-site scripting through the manipulation of the statusentery argument in an unknown function of the file...

PT-2022-8022 · Unknown · Ariadne Component Library

Name of the Vulnerable Software and Affected Versions: Ariadne Component Library versions up to 2.x Description: A critical issue has been found, affecting an unknown function of the file src/url/Url.php. This issue leads to server-side request forgery. Recommendations: For Ariadne Component...

CVE-2022-2530

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

PT-2022-8020 · Modx · Sterc Google Analytics Dashboard For Modx

Name of the Vulnerable Software and Affected Versions: Sterc Google Analytics Dashboard for MODX versions up to 1.0.5 Description: A vulnerability was found in the Sterc Google Analytics Dashboard for MODX, affecting an unknown functionality of the file...

PT-2022-27914 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the qcawifi.wifi%d vap%d.maclist parameter in the kick ban wifi mac allow sub 415B00 function. Recommendations: For TRENDnet TEW755AP version 1.13B01,...

PT-2022-28018 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the SYSPS parameter at the "/goform/SysToolChangePwd" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, consider restricting access to the...