PT-2023-26744 · Unknown · University Compass

Name of the Vulnerable Software and Affected Versions: University Compass versions 2.2.0 and below Description: The issue is related to a code injection vulnerability in the org.compass.core.executor.DefaultExecutorManager.configure component. This vulnerability can be exploited by passing an...

PT-2023-26079 · Unknown · October Cms

Name of the Vulnerable Software and Affected Versions: October CMS version 3.4.4 Description: The issue allows attackers to execute arbitrary code via a crafted file, specifically an svg file, which can be uploaded to the system. This can be done in the context of a browser and requires the...

PT-2023-19048 · Unknown · Command Centre

Name of the Vulnerable Software and Affected Versions: Command Centre versions vEL8.40 and prior Command Centre version vEL8.50 prior to vEL8.50.2831 MR8 Command Centre version vEL8.60 prior to vEL8.60.2347 MR6 Command Centre version vEL8.70 prior to vEL8.70.2185 MR4 Command Centre version vEL8.8...

PT-2023-24572 · WordPress · Pluginforage Woocommerce Product Categories Selection Widget

Name of the Vulnerable Software and Affected Versions: PluginForage WooCommerce Product Categories Selection Widget plugin versions = 2.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a...

PT-2023-25890 · Hgiga · Isherlock

Name of the Vulnerable Software and Affected Versions: HGiga iSherlock versions 4.5 before iSherlock-user-4.5-174 HGiga iSherlock versions 5.5 before iSherlock-user-5.5-174 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS...

PT-2023-4778 · WordPress · Forminator

Name of the Vulnerable Software and Affected Versions: Forminator plugin for WordPress versions up to, and including, 1.24.6 Description: The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server ...

PT-2023-25159 · Weintek · Weintek Weincloud

Name of the Vulnerable Software and Affected Versions: Weintek Weincloud version 0.13.6 Description: The issue allows an attacker to reset a password using the corresponding account's JWT token only. No information is provided about the estimated number of potentially affected devices worldwide o...

PT-2023-14395 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.3 Description: The issue allows a local user to escalate their privileges due to improper permission controls. Recommendations: For IBM Security Guardium version 11.3, consider restricting access to sensitive...

PT-2023-22224 · Ibm · Ibm Sterling Connect:Express For Unix

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Express for UNIX version 1.5 Description: The issue is related to the use of cookies without the SameSite attribute in the browser UI, making it vulnerable to certain attacks. Recommendations: For IBM Sterling...

PT-2025-20766

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 and versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5...

PT-2023-15082 · Sitealert · Sitealert

Name of the Vulnerable Software and Affected Versions: SiteAlert plugin versions = 1.9.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

PT-2023-3701 · Oracle · Oracle Essbase

Name of the Vulnerable Software and Affected Versions: Oracle Essbase version 21.4.3.0.0 Description: The issue is related to insufficient input validation in the Security and Provisioning component of Oracle Essbase. Exploitation of this issue can allow an attacker to gain unauthorized access to...

PT-2023-19886 · WordPress · Ankit Social Media Icons Widget

Name of the Vulnerable Software and Affected Versions: a.Ankit Social Media Icons Widget plugin versions 1.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-4489 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue is related to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it. This is due to an unlimited file...

PT-2023-7494 · Hazelcast · Hazelcast

Name of the Vulnerable Software and Affected Versions: Hazelcast versions 5.0 through 5.0.4 Hazelcast versions 5.1 through 5.1.6 Hazelcast versions 5.2 through 5.2.3 Hazelcast IMDG versions prior to 4.2.z Description: The issue is related to insufficient authorization procedures in Hazelcast,...

PT-2023-10358 · Undefined · Undefined

ParsedReport ChatGPT Translated Autotext: RSTReportsAnalyser + ChatGPT + Google Translate|DeepL ------ Основная идея: В данной статье рассматривается недавняя активность GuLoader или ModiLoader/DBatLoader и приводятся индикаторы компрометации IOC для заражения Formbook "QM18". В статье также...

PT-2023-25433 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted php file to the osghsadminimages file. This is a result of a file upload vulnerability...

PT-2023-26089 · Unknown · Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: Maid Hiring Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the /admin/search-booking-request.php component. Cross-site scripting XSS is a type of...

PT-2023-26048 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: Code-projects Online Restaurant Management System version 1.0 Description: The issue allows an attacker to perform SQL injection, which can be used to bypass the admin panel. This enables the attacker to view order records, add items, and...

PT-2023-26212 · Jenkins · Jenkins Benchmark Evaluator Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Benchmark Evaluator Plugin versions 1.0.1 and earlier Description: A missing permission check in the Jenkins Benchmark Evaluator Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check...