PT-2023-27248 · Elecom · Elecom Wireless Access Points

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN access point devices affected versions not specified WAB-S600-PS all versions WAB-S300 all versions Description: The issue allows an authenticated user to execute an arbitrary OS command by sending a specially crafted...

PT-2023-5858 · Supermicro · Supermicro X11 Series

Name of the Vulnerable Software and Affected Versions: Supermicro X11 series versions 1.66 Description: The issue exists due to the lack of protection for the web page structure in the web interface of Supermicro X11 series BMC IPMI servers. This allows a remote attacker to exploit an XSS issue a...

PT-2023-25760 · Adm · Adm

Name of the Vulnerable Software and Affected Versions: ADM versions 4.0.6.RIS1 through 4.1.0 ADM versions 4.2.2.RI61 and below Description: The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and delete...

PT-2023-23822 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2x through 9.5x Description: A local attacker with high privileges could potentially exploit this issue to bypass mode protections and gain elevated privileges. The issue is related to a privilege escalation...

PT-2023-23828 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.0.x through 9.5.x Description: The issue is related to an improper handling of insufficient privileges, which could be exploited by a local privileged attacker to elevate privileges. This vulnerability also...

PT-2023-26685 · Wolf Leo · Wolf-Leo Easyadmin8

Name of the Vulnerable Software and Affected Versions: Wolf-leo EasyAdmin8 version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the upload type function. This is a result of a File Upload vulnerability in the software. Recommendations: For Wolf-leo EasyAdmin8...

PT-2023-27128 · Digoo · Digoo Dg-Hamb Smart Home Security System

Name of the Vulnerable Software and Affected Versions: Digoo DG-HAMB Smart Home Security System version 1.0 Description: The issue is related to missing encryption in the RFID tag of the system, allowing attackers to create a cloned tag via brief physical proximity to the original device. This ca...

PT-2023-26644 · Comfast · Comfast Cf-Xr11

Name of the Vulnerable Software and Affected Versions: COMFAST CF-XR11 version 2.7.2 Description: An issue in the software allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub 410074 function at bin/webmgnt. Recommendations: For COMFAST CF-XR11 version 2.7.2,...

PT-2023-26646 · Comfast · Comfast Cf-Xr11

Name of the Vulnerable Software and Affected Versions: COMFAST CF-XR11 version 2.7.2 Description: The issue is a command injection vulnerability detected at function sub 4143F0. Attackers can send POST request messages to "/usr/bin/webmgnt" and inject commands into parameter timestr...

PT-2023-27129 · Unknown · Suleve 5-In-1 Smart Door Lock

Name of the Vulnerable Software and Affected Versions: Suleve 5-in-1 Smart Door Lock version v1.0 Description: The issue is related to missing encryption in the RFID tag of the Suleve 5-in-1 Smart Door Lock, which allows attackers to create a cloned tag via brief physical proximity to the origina...

PT-2023-22721 · Kiboko · Kiboko Labs Watu Quiz Plugin

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Watu Quiz plugin versions = 3.3.9.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

PT-2023-18797 · Audiocodes · Audiocodes Voip Desk Phones

Name of the Vulnerable Software and Affected Versions: AudioCodes VoIP desk phones versions through 3.4.4.1000 Description: An issue was discovered due to the use of a hard-coded cryptographic key, allowing an attacker to decrypt encrypted configuration files and retrieve sensitive information...

PT-2023-4903 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.1 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.6 Description: The issue is caused by a heap overflow in the dynamic memor...

PT-2023-32984 · Moq · Moq

Name of the Vulnerable Software and Affected Versions: Moq versions 4.20.0-rc through 4.20.1 Description: The issue concerns the inclusion of SponsorLink in certain versions of Moq, which runs an obfuscated DLL at build time. This DLL scans local git config data and shares the user's hashed email...

PT-2023-25528 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-enum-o bf include timezone parameter of index.php. This allows for potential malicious script execution. Recommendations: For PHPJabber...

PT-2023-28577 · WordPress · Absolute Privacy

Name of the Vulnerable Software and Affected Versions: Absolute Privacy plugin for WordPress versions up to, and including, 2.1 Description: The issue is due to missing nonce validation on the abpr profileShortcode function, making it possible for unauthenticated attackers to change user email an...

PT-2023-22283 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified Description: The issue concerns the exposure of sensitive information to unauthorized actors in the BIOS firmware of some IntelR NUC devices. This could potentially allow a privileged user to enable...

PT-2023-27102 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: A File Upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For PHPJabbers Ticket Support Script version 3.2, consider disabling file...

PT-2023-33013 · Opentelemetry · @Opentelemetry/Instrumentation

Name of the Vulnerable Software and Affected Versions: @opentelemetry/instrumentation versions prior to 0.41.2 Description: The issue allows for remote code execution when user-supplied input is passed directly to an import function. This is due to the import-in-the-middle loader generating a...

PT-2023-26072 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the Search Report Page of the Admin portal. This type of vulnerability allows attackers to inject malicious scripts...