Google Chrome Security Bypass Vulnerability (CNVD-2023-75504)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from improper execution in full-screen mode. An attacker can exploit this vulnerability to bypass security restrictions...

PT-2022-25152 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: A SQL injection issue was discovered via the id parameter at the "/modules/announcement/index.php?view=edit&id=" endpoint. This allows for potential exploitation of the SQ...

PT-2022-26224 · Gl.Inet · Gl.Inet Goodcloud Iot Device Management System

Name of the Vulnerable Software and Affected Versions: GL.iNet GoodCloud IoT Device Management System version 1.00.220412.00 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via...

PT-2022-6867 · Cisco · Cisco Emergency Responder +3

Name of the Vulnerable Software and Affected Versions: Cisco Emergency Responder affected versions not specified Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unity...

PT-2022-26033 · Unknown · Diaenergie

Name of the Vulnerable Software and Affected Versions: DIAEnergie versions prior to v1.9.01.002 Description: The issue is related to a stored cross-site scripting vulnerability. This vulnerability can be exploited through the "InsertReg API". Recommendations: For versions prior to v1.9.01.002,...

CVE-2022-42468

Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution RCE attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol...

PT-2022-6759 · Unknown +4 · Jupyter Core +4

Name of the Vulnerable Software and Affected Versions: Jupyter Core versions prior to 4.11.2 Description: The issue is related to arbitrary code execution in jupyter core due to the execution of untrusted files in the current working directory. This allows one user to run code as another,...

PT-2022-5270 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the /goform/form2WizardStep4 component of the D-Link DIR-816 A2 router's firmware. This can be exploited via the wizardstep4 pskpwd parameter,...

PT-2022-27029 · Delta Electronics · Diaenergy

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergy version 1.9 Description: The issue is related to a SQL Injection flaw in the HICT Loop class. This flaw could potentially allow an attacker to gain code execution on a remote system. Recommendations: For Delta...

PT-2022-21455 · Unknown · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A command injection issue exists in the XCMD doDebug functionality, allowing for arbitrary command execution through a specially-crafted XCMD. This can be triggered by sending a...

PT-2022-20198 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An OS command injection issue exists in the web interface /action/iperf functionality. A specially-crafted HTTP request can lead to arbitrary command...

Optimistic bridging pattern, can lead to bridge exploitation

Lines of code Vulnerability details Impact Zero deposit Bridging. Wherease users can fake the depositing process but can mint multiple tokens in the destination chain. The bridging is optimistic, whereas the validation restricts to just checking the function selector and a no-error pattern, this...

PT-2022-21926 · WordPress · Wp All Export Pro

Name of the Vulnerable Software and Affected Versions: WP All Export Pro versions prior to 1.7.9 Description: The issue allows any logged-in user with export privileges to execute arbitrary code on the site, despite the default restriction to administrators. This is because the plugin does not...

PT-2022-21774 · WordPress · Kadence Woocommerce Email Designer

Name of the Vulnerable Software and Affected Versions: Kadence WooCommerce Email Designer WordPress plugin versions prior to 1.5.7 Description: The issue arises from the unserialization of the content of an imported file, potentially leading to PHP object injections when an admin imports a...

PT-2022-7598

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description A flaw was found in Ansible in the amazon.aws collection when using the tower callback parameter from the amazon.aws.ec2 instance module. This issue allows an attacker to take advantage of th...

PT-2022-18525 · WordPress · Adminpad

Name of the Vulnerable Software and Affected Versions: AdminPad WordPress plugin versions prior to 2.2 Description: The issue concerns a lack of CSRF check when updating an admin's note, allowing attackers to make a logged-in admin update their notes via a CSRF attack. Recommendations: For versio...

PT-2022-22670 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 versions 3.1.16 through 3.3.0 Description: A denial of service issue exists in the web server hashFirst functionality. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of reques...

PT-2022-19642 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An authentication bypass issue exists in the web interface, specifically in the /action/factory functionality. This can be triggered by a specially-crafted...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

CVE-2022-41799

Improper access control vulnerability in GROWI prior to v5.1.4 v5 series and versions prior to v4.5.25 v4 series allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users...