PT-2023-25639 · Loxone · Loxone Miniserver Go Gen.2

Name of the Vulnerable Software and Affected Versions: Loxone Miniserver Go Gen.2 versions prior to 14.2 Description: The issue allows a local user to calculate the root password and escalate privileges due to the root password being calculated using hard-coded secrets and the MAC address...

PT-2023-18767 · Hero · Hero Qubo Hcd01 02 V1.38 20220125

Name of the Vulnerable Software and Affected Versions: Hero Qubo HCD01 02 V1.38 20220125 Description: The issue allows TELNET access with root privileges by default, without a password. Recommendations: For Hero Qubo HCD01 02 V1.38 20220125, consider disabling TELNET access until a patch is...

PT-2023-12511 · WordPress · Edwiser Bridge

Name of the Vulnerable Software and Affected Versions: Edwiser Bridge plugin for WordPress versions up to, and including, 2.0.6 Description: The issue is due to missing or incorrect nonce validation on several functions, including user data synchronization initiater, course synchronization...

PT-2023-35890 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: default get outline, pdfi fapi get glyph, and get fapi...

PT-2023-24903 · Unknown · Itsourcecode Online Hotel Management System Project In Php

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Hotel Management System Project In PHP version 1.0.0 Description: The issue allows for Cross Site Scripting XSS and potentially remote code execution by entering malicious code in the date selection box. This can be...

PT-2023-24261 · Gira Giersiepen · Gira Knx/Ip-Router

Name of the Vulnerable Software and Affected Versions: Gira Giersiepen Gira KNX/IP-Router versions 3.1.3683.0 through 3.3.8.0 Description: The web interface of the affected device allows a remote attacker to read sensitive files via directory-traversal sequences in the URL. This issue enables...

PT-2023-4825 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff version 4.5.0 Description: The issue is related to a buffer overflow in the rotateImage function of the libtiff library. This overflow can cause a heap-buffer-overflow and SEGV. The vulnerability may allow an attacker to cause a denia...

PT-2023-25060 · H3C · H3C Magic

Name of the Vulnerable Software and Affected Versions: H3C Magic B1STV100R012 affected versions not specified Description: A stack overflow in the EditWlanMacList function allows attackers to cause a Denial of Service DoS via a crafted POST request to the API endpoint. The issue is related to the...

PT-2023-6249 · Yifan · Yifan Yf325

Name of the Vulnerable Software and Affected Versions: Yifan YF325 version 1.0 20221108 Description: The issue is related to two heap-based buffer overflow vulnerabilities in the httpd manage post functionality. A specially crafted network request can lead to a heap buffer overflow, allowing an...

PT-2023-13738 · Tenda · Tenda Ac6 Ac1200 Smart Dual-Band Wifi Router

Name of the Vulnerable Software and Affected Versions: Tenda AC6 AC1200 Smart Dual-Band WiFi Router version 15.03.06.50 multi Description: A cross-site scripting XSS issue was found in the Parental Control module, specifically via the deviceId parameter. This allows for potential malicious script...

PT-2023-25054 · H3C · H3C Magic B1St

Name of the Vulnerable Software and Affected Versions: H3C Magic B1STW version B1STV100R012 Description: The issue is related to a stack overflow via the function SetAPInfoById, allowing attackers to cause a Denial of Service DoS via a crafted POST request. Recommendations: For version...

PT-2023-23166 · Lenovo · Lxca

Name of the Vulnerable Software and Affected Versions: LXCA affected versions not specified Description: An unauthenticated XML external entity injection XXE vulnerability exists in LXCA's Common Information Model CIM server that could result in read-only access to specific files. Recommendations...

PT-2023-25668 · Inex · Ixpmanager

Name of the Vulnerable Software and Affected Versions: INEX IXP-Manager versions prior to 6.3.1 Description: The issue allows for XSS attacks. The following files may be affected: list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, overview.foil.php, cust.foil.php, and...

PT-2023-21554 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega platform versions 7.4 through 8.8.x Description: The issue affects Pega platform clients who have upgraded from a version prior to 8.x and are using versions 7.4 through 8.8.x, potentially utilizing default credentials. Recommendations:...

PT-2023-4737 · WordPress · Wp Quick Post Duplicator

Name of the Vulnerable Software and Affected Versions: Quick Post Duplicator for WordPress versions up to, and including, 2.0 Description: The issue is related to SQL Injection via the post id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation...

PT-2023-24708 · WordPress · Wp Overnight Quick/Bulk Order Form For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Overnight Quick/Bulk Order Form for WooCommerce plugin versions = 3.5.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For WP...

PT-2023-20941 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: Pluck CMS versions 4.7.15 through 4.7.16-dev5 Description: A remote code execution issue was found in the /admin.php file of Pluck CMS, allowing attackers to execute arbitrary code through the manage file functionality. Recommendations: For...

PT-2023-5599 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions 1.4.0 Description: The issue is related to a regression in the Filesystem scope check for dotfiles on Unix systems, introduced in the 1.4.0 release. This regression affects Tauri applications using wildcard scopes in the fs...

PT-2023-4058 · Siemens · Ruggedcom Rox Mx5000 +8

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.0 RUGGEDCOM ROX MX5000RE versions prior to V2.16.0 RUGGEDCOM ROX RX1400 versions prior to V2.16.0 RUGGEDCOM ROX RX1500 versions prior to V2.16.0 RUGGEDCOM ROX RX1501 versions prior to V2.16.0...

PT-2023-23694 · Enphase · Enphase Installer Toolkit

Name of the Vulnerable Software and Affected Versions: Enphase Installer Toolkit version 3.27.0 Description: The issue concerns hard-coded credentials embedded in the binary code of the Android application. An attacker can exploit this to gain access to sensitive information. Recommendations: For...