PT-2024-33473 · Myriad Solutionz · Myriad Solutionz Property Lot Management System

Name of the Vulnerable Software and Affected Versions: Myriad Solutionz Property Lot Management System versions n/a through 4.2.38 Description: The issue allows hackers to upload malicious files, exploiting an Unrestricted File Upload vulnerability. This enables the upload of a web shell to a web...

PT-2024-16070 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical issue affects the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the username argument leads to SQL injection. The attack may...

CVE-2024-4739

The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable. By acquiring a valid authenticator, an attacker can pose as an authorized user and successfully access the resource...

CVE-2024-4739

The issue pertains to MOXA MXsecurity, affecting versions v1.1.0 and prior. Root cause: lack of access restriction to resources, enabling an attacker who has a valid authenticator to impersonate an authorized user and access the resource. Impact: confidentiality could be exposed (as per CVE metri...

CVE-2024-4739 MXsecurity License Generation Function Disclosure

The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable. By acquiring a valid authenticator, an attacker can pose as an authorized user and successfully access the resource...

PT-2024-30467 · Unknown · Bert Kößler Movie Database

Name of the Vulnerable Software and Affected Versions: Bert Kößler Movie Database versions n/a through 1.0.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-7379 · Unknown · Xlight Ftp Server

Name of the Vulnerable Software and Affected Versions: Xlight FTP Server versions 3.9.4.3 Description: The issue exists due to an integer overflow error in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content. This can allow a remote...

PT-2024-7477

Name of the Vulnerable Software and Affected Versions: MXsecurity versions v1.1.0 and prior Description: The issue is related to the lack of access restriction to a resource from unauthorized users. This allows an attacker, who has acquired a valid authenticator, to pose as an authorized user and...

CVE-2024-4739: Exposed Dangerous Method or Function

The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable. By acquiring a valid authenticator, an attacker can pose as an authorized user and successfully access the resource...

PT-2024-31853 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2eeFAST versions =2.7 Description: The issue is related to unsafe filtering in the backend function, which allows an attacker to trigger certain sensitive functions, resulting in arbitrary code execution. Recommendations: For J2eeFAST versio...

PT-2024-33435 · Unknown · Simple Testimonials Showcase

Name of the Vulnerable Software and Affected Versions: Simple Testimonials Showcase versions 1.1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for the execution of malicious scrip...

PT-2024-24257

Name of the Vulnerable Software and Affected Versions Goahead versions = 6.0.0 Description This issue involves two Use After Free UAF and one Double Free vulnerabilities. These vulnerabilities are caused by JST values not being nulled when freed during parsing of JST templates. If the ME GOAHEAD...

PT-2024-33402 · Unknown · My Favorites

Name of the Vulnerable Software and Affected Versions: My Favorites versions n/a through 1.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where an attacker can inject malicio...

PT-2024-33374 · WordPress · Ahmeti Wp Timeline

Name of the Vulnerable Software and Affected Versions: Ahmeti Wp Timeline versions prior to 5.1 Description: A Cross-Site Request Forgery CSRF issue exists in Ahmet Imamoglu Ahmeti Wp Timeline, allowing Stored XSS. Recommendations: For versions prior to 5.1, update to a version that includes a fi...

PT-2024-33448 · Digitally · Digitally

Name of the Vulnerable Software and Affected Versions: Digitally versions 1.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions 1.0.8...

PT-2024-33450 · Unknown · Themesflat Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Themesflat Addons For Elementor versions prior to 2.2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-32953 · WordPress · Acf Images Search/Insert

Name of the Vulnerable Software and Affected Versions: ACF Images Search And Insert versions 1.1.4 and earlier Description: The issue affects the ACF Images Search And Insert plugin, allowing unrestricted upload of files with dangerous types, such as a web shell, to a web server. This could...

PT-2024-9995 · Drupal +1 · Drupal Core +1

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 10.0.0 through 10.2.9 Description: A vulnerability in Drupal Core allows file manipulation. This issue is related to weaknesses in handling error situations, which could allow a remote attacker to impact the integrity of...

PT-2024-33383 · Unknown · Ahime Image Printer

Name of the Vulnerable Software and Affected Versions: Ahime Image Printer versions prior to 1.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability affects Ahime Image Printer,...

CVE-2024-4690: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...