PT-2023-30431 · Unknown · Best Training Member

Name of the Vulnerable Software and Affected Versions: best training member version 13.6.1 Description: The issue allows remote attackers to send malicious notifications due to the leakage of channel access token in best training member. Recommendations: For version 13.6.1, consider restricting...

PT-2023-23143 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager plugin versions = 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...

PT-2023-15880 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to a race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition...

PT-2023-30227 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter of the "view profile.php" resource does not validate the characters received and the...

PT-2024-1467

Name of the Vulnerable Software and Affected Versions runc versions 1.0.0-rc93 through 1.1.11 containerd versions 1.4.7 through 1.6.27 containerd versions 1.7.0 through 1.7.12 Docker versions 20.10.8 through 24.0.8 Docker versions 24.0.9 through 25.0.2 Description An internal file descriptor leak...

PT-2025-18851 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.4 through 5.5 Description: A vulnerability in the Linux kernel has been resolved, related to the misuse of non-idle barriers as fence trackers. The issue was caused by a race condition in the barrier processing code,...

PT-2023-30216 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter in the uploadphoto function of the functions.php resource does not validate the characters...

PT-2025-18835 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where attempting to probe a mt7921e PCI card without firmware results in a successful probe, but ieee80211 register hw is not called. Wh...

PT-2023-30210 · Alter · Alter

Name of the Vulnerable Software and Affected Versions: Alter plugin versions = 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. No...

PT-2023-29766 · Unknown · Wpn-Xm Serverstack

Name of the Vulnerable Software and Affected Versions: WPN-XM Serverstack version 0.8.6 Description: A Cross-Site Scripting issue has been detected in WPN-XM Serverstack. This issue could allow a remote attacker to send a specially crafted JavaScript payload through the...

PT-2023-30569 · Zoho · Manageengine Desktop Central

Name of the Vulnerable Software and Affected Versions: ManageEngine Desktop Central version 9.1.0 Description: A Server-Side Request Forgery SSRF vulnerability has been found, specifically affecting the /smtpConfig.do component. This issue could allow an authenticated attacker to launch targeted...

PT-2023-29523 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the verified parameter of the routers/user-router.php resource,...

PT-2023-26707

Name of the Vulnerable Software and Affected Versions Lost and Found Information System version 1.0 Description The issue allows account takeover via username and password to a "/classes/Users.php?f=save" API endpoint. Recommendations For Lost and Found Information System version 1.0, consider...

PT-2023-29356 · Unknown · Online Bus Booking System

Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the date parameter of the "bus info.php" resource does not validate the characters received, and they...

PT-2023-28667 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard versions 10.1 through 11.1 IBM CICS TX Advanced versions 10.1 through 11.1 Description: The issue arises because the software performs an operation at a privilege level that is higher than the minimum level required, whic...

PT-2023-28484 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dm service. This could lead to local information disclosure with no additional...

PT-2023-35558 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash has been reported, involving the dwg geojson object and dwg write geojson functions in the llvmfuzz.c file. The crash...

PT-2023-32027 · WordPress · Photos/Files Contest Gallery Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Photos and Files Contest Gallery WordPress plugin version 21.2.8.1 and earlier Description: The issue allows unauthenticated users to perform Cross-Site Scripting attacks via certain headers due to the plugin not sanitising and escaping some...

PT-2025-26465 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 16.0 through 16.3.5 GitLab EE versions 16.4 through 16.4.1 GitLab EE versions 16.5 through 16.5.0 Description: An issue has been discovered in GitLab EE where arbitrary access to the titles of private specific references...

PT-2023-25740 · Sap · Sap Enable Now

Name of the Vulnerable Software and Affected Versions: SAP Enable Now versions WPB MANAGER 1.0, WPB MANAGER CE 10, WPB MANAGER HANA 10, ENABLE NOW CONSUMP DEL 1704 Description: The issue is related to the absence of the X-FRAME-OPTIONS response header in SAP Enable Now, allowing an unauthenticate...