PT-2022-23166 · Unknown · Github.Com/Gagliardetto/Binary

Name of the Vulnerable Software and Affected Versions: github.com/gagliardetto/binary versions prior to v0.7.1 Description: The issue is a memory allocation vulnerability that can be exploited to allocate slices in memory with excessive size values, potentially exhausting available memory or...

PT-2022-23487 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.97 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located at the /dede/co do.php endpoint via the dopost, rpok, and aid parameters. Recommendations: For DedeCMS...

PT-2022-23499 · Innosilicon · Innosilicon T3T+

Name of the Vulnerable Software and Affected Versions: InnoSilicon T3T+ version t2t+ soc 20190911 151433.swu Description: A remote code execution issue was found in the checkUrl function, allowing for potential exploitation. Recommendations: For version t2t+ soc 20190911 151433.swu, as a temporar...

PT-2022-23825 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2 v1.10CNB04.img Description: The network can be initialized without authentication via the "/goform/wizard end" API endpoint. Recommendations: For D-Link DIR-816 version A2 v1.10CNB04.img, as a temporary workaround,...

PT-2022-23601 · Unknown · Picuploader

Name of the Vulnerable Software and Affected Versions: PicUploader version 2.6.3 Description: A cross-site scripting XSS issue was found in the /master/index.php component of PicUploader. This allows for potential malicious script execution. Recommendations: For PicUploader version 2.6.3, conside...

PT-2022-4499 · Ibm · Ibm Security Identity Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Manager versions 6.0 through 6.0.2 Description: The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted Web site, the attacker cou...

PT-2022-23463 · Hytec Inter · Hytec Inter Hwl-2511-Ss

Name of the Vulnerable Software and Affected Versions: Hytec Inter HWL-2511-SS versions 1.05 and below Description: A command injection vulnerability in the CLI implementation allows attackers to execute arbitrary commands with root privileges. Recommendations: For Hytec Inter HWL-2511-SS version...

PT-2022-23449 · Unknown · Kensite Cms

Name of the Vulnerable Software and Affected Versions: Kensite CMS version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the name and oldname parameters at the "/framework/mod/db/DBMapper.xml" API endpoint. Recommendations:...

PT-2022-23405 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered, which occurs via the pppoeUser parameter. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139 B20201216, as a temporary workaround, conside...

PT-2022-20657 · Nortek Linear · Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Nortek Linear eMerge E3-Series devices versions 0.32-09c and earlier Description: The issue allows an attacker to obtain admin credentials stored in /test.txt, which can be used to open a building's doors. This occurs even when default...

PT-2022-23909 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Buffer Overflow that occurs in the sub 42FDE4 function. This function handles POST requests under the "/goform/SetIpMacBind" API endpoint, which is triggered by the sub...

PT-2022-23402 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered via the command parameter in the setTracerouteCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

PT-2022-23428 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function SetMacAccessMode. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the SetMacAccessMode function a...

PT-2022-23389 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the ip parameter in the...

PT-2022-23390 · H3C · H3C B5 Mini

Name of the Vulnerable Software and Affected Versions: H3C B5 Mini version B5MiniV100R005 Description: A stack overflow issue was discovered in the function EditMacList.d. Recommendations: For version B5MiniV100R005, consider disabling the EditMacList.d function as a temporary workaround until a...

PT-2022-4636 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the improper resolution of links before file access, which could allow privilege escalation. This could potentially be exploited by a remote attacker to...

PT-2022-23235 · Xxl-Job · Xxl-Job

Name of the Vulnerable Software and Affected Versions: XXL-JOB versions prior to the version released after 11 July 2022 Description: The issue allows an attacker to execute admin functions with a low-privilege account due to insecure permissions. Recommendations: For all versions as of 11 July...

PT-2022-23267 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.8-UTF8-SP1 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability. It affects the background, column management function, and add functionality. Recommendations: For EyouCMS version 1.5.8-UTF8-SP1,...

PT-2022-23241 · Unknown · Mapgis 10.5 Pro Igserver

Name of the Vulnerable Software and Affected Versions: MapGIS 10.5 Pro IGServer version 10.5 Description: The issue is related to hardcoded credentials in the front-end of the software, which can lead to escalation of privileges and arbitrary file deletion. Recommendations: For MapGIS 10.5 Pro...

PT-2022-20199 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote attacker to inject an arbitrary script via unspecified vectors, exploiting a cross-site scripting vulnerability in specific parameters. Recommendations: For...