PT-2023-22895 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is caused by improper input validation in the IpcTxGetVerifyAkey function, allowing an attacker to cause an out-of-bounds write. Recommendations: For versions prior to...

PT-2023-23700 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper access control in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable denial of service via local access...

PT-2023-25526 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the column parameter of "index.php" in PHPJabbers Document Creator. Recommendations: For PHPJabbers Document Creator version 1.0, avoid using th...

PT-2023-26375 · Lwsystems · Lwsystems Benno Mailarchiv

Name of the Vulnerable Software and Affected Versions: LWsystems Benno MailArchiv version 2.10.1 Description: An issue was discovered in LWsystems Benno MailArchiv, where attackers can cause cross-site scripting XSS via JavaScript content to a mailbox. Recommendations: For LWsystems Benno...

PT-2023-19908 · Anadnet · Anadnet Quick Page/Post Redirect Plugin

Name of the Vulnerable Software and Affected Versions: Anadnet Quick Page/Post Redirect Plugin plugin versions = 5.2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Anadnet Quick...

PT-2023-26716

Name of the Vulnerable Software and Affected Versions mAyaNet E-Commerce Software versions prior to 1.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-26078 · Unknown · Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: Maid Hiring Management System version 1.0 Description: The issue is related to a SQL injection vulnerability found in the Search Maid page. This vulnerability could potentially allow unauthorized access to sensitive data. Recommendations: For...

PT-2023-4652 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute...

PT-2023-25541 · Diebold Nixdorf · Diebold Nixdorf Vynamic View Console

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic View Console versions 5.3.1 and earlier Description: The issue allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature. This enables the...

PT-2023-26076 · Unknown · Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: Maid Hiring Management System version 1.0 Description: A SQL injection issue was found in the Booking Request page of the system. Recommendations: For Maid Hiring Management System version 1.0, consider restricting access to the Booking Reque...

PT-2023-26152 · WordPress · Woocommerce Shipping Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses plugin versions prior to 3.8.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for...

PT-2023-26720 · Jeesite · Jeesite

Name of the Vulnerable Software and Affected Versions: jeesite version 1.2.6 Description: An issue in the delete function in the ActModelController class allows authenticated attackers to arbitrarily delete models created by the Administrator. Recommendations: For jeesite version 1.2.6, consider...

PT-2023-25485 · Xoops Cms · Xoops Cms

Name of the Vulnerable Software and Affected Versions: Xoops CMS version 2.5.10 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the category name field of the image manager function. This enables the attacker to inject malicious scripts into the...

PT-2023-25497 · Eramba · Eramba

Name of the Vulnerable Software and Affected Versions: Eramba versions 3.19.1 Description: The issue allows a remote attacker to execute arbitrary code via the path parameter in the URL. This can be exploited by manipulating the URL to inject malicious code. Recommendations: For version 3.19.1, a...

PT-2023-4123 · Zkteco · Zkteco Biotime

Name of the Vulnerable Software and Affected Versions: ZKTeco BioTime version 8.5.5 Description: The issue is related to a hidden API in the ZKTeco BioTime platform, which allows unauthenticated attackers to reset the Administrator password via a crafted web request. This can be exploited by a...

PT-2023-26737 · Unknown · Webmagic-Extension

Name of the Vulnerable Software and Affected Versions: webmagic-extension versions 0.9.0 and below Description: A code injection issue was discovered in the component us.codecraft.webmagic.downloader.PhantomJSDownloader. This allows for potential code injection attacks. Recommendations: For...

PT-2023-24469 · Teleadapt · Teleadapt Roomcast Ta-2400

Name of the Vulnerable Software and Affected Versions: TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 Description: The issue concerns the use of a hard-coded password, also referred to as a PIN, with the values 385521, 843646, and 592671. Recommendations: For TeleAdapt RoomCast TA-2400...

PT-2023-14298 · Gx · Xperiencentral

Name of the Vulnerable Software and Affected Versions: GX Software XperienCentral versions 10.31.0 through 10.33.0 Description: The issue allows for cross-site request forgery CSRF due to the unique token being deducible from the names of all input fields. Recommendations: For GX Software...

PT-2023-26345 · Trustwave +1 · Modsecurity +1

Name of the Vulnerable Software and Affected Versions: Trustwave ModSecurity versions 3.0.0 through 3.0.9 Description: The issue is related to Inefficient Algorithmic Complexity. Recommendations: For Trustwave ModSecurity versions 3.0.0 through 3.0.9, update to version 3.0.10 or later to resolve...

PT-2023-22704

Name of the Vulnerable Software and Affected Versions Biltay Technology Scienta versions prior to 20230630.1953 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...