1Panel O&M management panel has a background arbitrary file reading vulnerability

Summary Arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. Details In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the file by obtaining the requested path parameterpath. The request parameters are not...

PT-2023-22905 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.56.6 Description: The issue is related to improper sanitization of incoming intent in Galaxy Store, allowing local attackers to access privileged content providers as Galaxy Store permission. Recommendations...

PT-2023-26584 · Unknown · Special Interest Group Network For Analysis/Liaison

Name of the Vulnerable Software and Affected Versions: Special Interest Group Network for Analysis and Liaison versions 4.4.0 through 4.7.7 Description: The issue allows authorized API users to view attribute information of the poster that is set as "non-disclosure" in the system settings. This i...

PT-2023-25812

Name of the Vulnerable Software and Affected Versions Oduyo Online Collection Software versions prior to 1.0.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-28167 · Sourcecodester · Sourcecodester Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Resort Reservation System, affecting the file view fee.php. The manipulation of the id argument leads to SQL...

PT-2023-24562 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T606/T612/T616/T610/T618 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a possible missing permission check in the vowifi service. This could lead to local information disclosure with no additional executi...

PT-2023-5845 · Unknown · Connected Io

Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue is related to a stack-based buffer overflow vulnerability in the communication protocol of the affected software. This vulnerability enables attackers to take control over devices...

PT-2023-27803 · Phpjabbers · Php Jabbers Shuttle Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Shuttle Booking Software version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting an unknown part of the file /index.php. The manipulation leads to cross site scripting, and it is...

SUSE-SU-2023:3059-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to version 115.0.1 bsc1212438: - CVE-2023-3600: Fixed use-after-free in workers bmo1839703. - CVE-2023-3417: Fixed File Extension Spoofing using the Text Direction Override Character bmo1835582. Bugfixe...

PT-2023-11596 · Yunyecms · Yunyecms

Name of the Vulnerable Software and Affected Versions: yunyecms version 2.0.2 Description: The issue allows remote attackers to run arbitrary SQL commands via the XFF variable. This can potentially lead to unauthorized access and manipulation of database content. Recommendations: For yunyecms...

Journal Management Software 1.2.4 SQL Injection

==================================================================================================================================== | Title : Journal Management Software V1.2.4 Sql injection | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bi...

SolarWinds Platform 安全漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in versions of SolarWinds Platform prior to 2023.3 that stems from vulnerability to an incorrect sequence of behavior that allows a user wit...

PT-2023-13041 · Rtx Trap · Rtx Trap

Name of the Vulnerable Software and Affected Versions: RTX TRAP version 1.0 Description: The issue is related to host header poisoning. Recommendations: For RTX TRAP version 1.0, consider restricting access to vulnerable endpoints to minimize the risk of exploitation. At the moment, there is no...

PT-2023-26179 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue was found in the function actionExport of the component Personal Office Address Book, specifically in the file "?r=contact/default/export". This issue leads to SQL injection and can be...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 3

Package name: xms10.15.0.10327.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: July 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this...

PT-2023-13492 · Nikola Loncar · Easyappointments

Name of the Vulnerable Software and Affected Versions: Nikola Loncar Easy Appointments plugin versions prior to 3.11.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-12518 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An issue allows an administrator to execute commands as root via the alerts management dialog. Recommendations: At the moment, there is no information about a newer version that contain...

Microsoft Windows Installed Software Version Enumeration

This plugin enumerates the installed software version by interrogating information obtained from various registry entries and files on disk. This plugin provides a best guess at the software version and a confidence level for that version. Note that the versions detected here do not necessarily...

PT-2023-21773 · Softmed · Softmed Selfpatron

Name of the Vulnerable Software and Affected Versions: Softmed SelfPatron versions prior to 2.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: Fo...

Ovarro TBox RTU 安全漏洞

Ovarro TBox RTUs is a modular remote monitoring and automation solution from Ovarro Germany. A security vulnerability exists in the Ovarro TBox RTUs that stems from a lack of authorization to run certain API commands, which could be exploited by an attacker to disclose sensitive information, such...