PT-2024-26958 · WordPress · Month Name Translation Benaceur Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: month name translation benaceur WordPress plugin versions prior to 2.3.8 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowe...

PT-2024-26953 · WordPress · Hl Twitter Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: HL Twitter WordPress plugin versions through 2014.1.18 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: For HL...

PT-2024-25667 · WordPress · Wp Prayer

Name of the Vulnerable Software and Affected Versions: WP Prayer WordPress plugin versions 2.0.9 and earlier Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations:...

PT-2024-3651 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical vulnerability was found in the D-Link DAR-7000 and DAR-8000 routers, affecting an...

PT-2024-25672

Name of the Vulnerable Software and Affected Versions WP Prayer WordPress plugin versions 2.0.9 and earlier Description The issue concerns a lack of CSRF check when updating email settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could potentially...

PT-2024-24219 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A hardcoded password for the root user was found in the /etc/shadow.sample file. Recommendations: For TOTOLINK EX200 version 4.0.3c.7646 B20201211, consider changing the hardcoded...

PT-2024-26240 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 12.4 Description: The issue is related to Cross Site Scripting XSS due to the lack of sanitization of the HTTP USER AGENT variable. In the view/about.php file, the website retrieves the user agent from the headers through ...

PT-2024-25464 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.3.0 through 2.3.2 Description: An arbitrary file upload issue exists at admin/views/plugin.php, allowing a remote attacker to submit a special request and upload a malicious file to execute arbitrary code. Recommendations...

PT-2024-26962 · WordPress · Responsive Contact Form Builder & Lead Generation Plugin

Name of the Vulnerable Software and Affected Versions: The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin versions 1.8.9 and earlier Description: The issue concerns the lack of sanitization and escaping of some settings in the plugin, which could allow high-privilege...

PT-2024-25859 · Savsoft · Savsoft Quiz

Name of the Vulnerable Software and Affected Versions: Savsoft Quiz version 6.0 Description: The issue allows stored XSS via the quiz name parameter in the "index.php/quiz/insert quiz/" endpoint. This enables potential attackers to inject malicious scripts into the application. Recommendations: F...

PT-2025-18861 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the powerpc/iommu component. The problem occurs when using the debugfs lookup function, which requires a...

PT-2024-14079 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: Jfinalcms version 5.0.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component. This enables the attacker to perform unauthorized actions on the...

PT-2024-25362 · Rednao · Rednao Smart Forms

Name of the Vulnerable Software and Affected Versions: RedNao Smart Forms versions 2.6.91 and earlier Description: The issue is related to a Missing Authorization vulnerability in RedNao Smart Forms. Recommendations: For RedNao Smart Forms versions 2.6.91 and earlier, at the moment, there is no...

PT-2024-14713 · Unknown · Onos-Kpimon

Name of the Vulnerable Software and Affected Versions: onos-kpimon version 0.4.7 Description: The issue allows out-of-bounds array access in the processIndicationFormat1 function. Recommendations: For version 0.4.7, consider disabling the processIndicationFormat1 function until a patch is availab...

PT-2024-3337

Name of the Vulnerable Software and Affected Versions glibc versions 2.15 and later Description The issue is related to the Name Service Cache Daemon's nscd netgroup cache, which uses xmalloc or xrealloc functions. These functions may terminate the process due to a memory allocation failure,...

PT-2024-23616 · Unknown · Px4-Autopilot

Name of the Vulnerable Software and Affected Versions: PX4 Autopilot versions 1.14 and earlier Description: The issue allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point function. Recommendations: For PX4 Autopilot versions 1.14 and earlier...

PT-2024-24553 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: An issue in SEMCMS allows a remote attacker to execute arbitrary code via a crafted script. Recommendations: For SEMCMS version 4.8, at the moment, there is no information about a newer version that contains a...

PT-2024-28435 · Totara Learning Solutions · Totara Lms

Name of the Vulnerable Software and Affected Versions: Totara LMS version 18.0.1 Build 20231128.01 Description: A vulnerability was found in the file admin/roles/check.php of the component Profile Handler. The manipulation of the argument ID Number leads to cross site scripting. The attack may be...

PT-2024-21797 · WordPress · Otter Blocks

Name of the Vulnerable Software and Affected Versions: Otter Blocks WordPress plugin versions prior to 2.6.6 Description: The issue arises from the Otter Blocks WordPress plugin not properly escaping its mainHeadings blocks' attribute before appending it to the final rendered block. This allows...

PT-2024-5965 · Pytorch +1 · Pytorch +1

Name of the Vulnerable Software and Affected Versions: Pytorch versions prior to v2.2.0 Description: The issue is related to a use-after-free vulnerability in the torch/csrc/jit/mobile/interpreter.cpp component of the PyTorch machine learning framework. This vulnerability can be exploited to...