PT-2023-14536 · Unknown · Weblib Ucopia

Name of the Vulnerable Software and Affected Versions: Weblib Ucopia versions prior to 6.0.13 Description: An issue was discovered in the SSH Server of Weblib Ucopia, where it has insecure permissions. Recommendations: For versions prior to 6.0.13, update to version 6.0.13 or later to resolve the...

Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated) Exploit

Exploit Title: Smart Office Web 20.28 - Remote Information Disclosure Unauthenticated Shodan Dork:: inurl:"https://www.shodan.io/search?query=smart+office" Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://smartofficepayroll.com/ Software Link:...

SUSE-SU-2023:2572-1 Security update for salt

This update for salt fixes the following issues: - Update to Salt release version 3006.0 jscPED-4361 See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency...

Inpiazza Cloud WiFi 安全漏洞

Inpiazza Cloud WiFi is an innovative artificial intelligence platform from Inpiazza, Inc. that allows digital interactions via WiFi interactions. A security vulnerability exists in Inpiazza Cloud WiFi versions prior to v4.2.17 that stems from the portal not enforcing a limit on the number of...

CVE-2023-23954

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-33509

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

PT-2023-20298 · WordPress · Sebastian Krysmanski Upload File Type Settings

Name of the Vulnerable Software and Affected Versions: Sebastian Krysmanski Upload File Type Settings plugin versions = 1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For...

CVE-2023-30469 Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00...

Hubstaff 1.6.14-61e5e22e - (wow64log) DLL Search Order Hijacking Vulnerability

Exploit Title: Hubstaff 1.6.14-61e5e22e - 'wow64log' DLL Search Order Hijacking Exploit Author: Ahsan Azad Vendor Homepage: https://hubstaff.com/ Software Link: https://app.hubstaff.com/download Version: 1.6.13, 1.6.14 Tested On: 64-bit operating system, x64-based processor Description Hubstaff i...

CVE-2023-2837

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

PT-2023-3988 · Unknown · Sumatrapdf

Name of the Vulnerable Software and Affected Versions: SumatraPDF version 3.4.6 Description: The issue is related to a buffer overflow in the SumatraPDF Reader when handling text files, such as first.txt and second.txt, due to the lack of size checking of input data. This can be exploited by a...

CVE-2023-29284

Adobe Substance 3D Painter versions 8.3.0 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-41979

Protection mechanism failure in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

Tenda CP3 加密问题漏洞

Tenda CP3 is a smart camera from Tenda China. A security vulnerability exists in the Tenda CP3 version V11.10.00.2211041355, which stems from the device containing a hard-coded default root password that is stored using weak encryption, and can be exploited by an attacker to connect to a TELNET...

CVE-2023-2615 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21...

PT-2023-22435 · Wondershare · Wondershare Dr.Fone

Name of the Vulnerable Software and Affected Versions: Wondershare Dr.Fone version 12.9.6 Description: The issue allows a remote attacker to escalate privileges via the service permission function. Recommendations: For Wondershare Dr.Fone version 12.9.6, consider restricting access to the service...

CVE-2023-26098

An issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. An attacker may upload a crafted file to execute arbitrary code...

PT-2023-14777 · Unknown · Denis 微信机器人高级版

Name of the Vulnerable Software and Affected Versions: Denis 微信机器人高级版 plugin versions = 6.0.1 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, which will then be executed by the user's browser...

SUSE-SU-2023:1931-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2023-1992: Fixed RPCoRDMA dissector crash bsc1210405. - CVE-2023-1993: Fixed LISP dissector large loop bsc1210404. - CVE-2023-1994: Fixed GQUIC dissector crash bsc1210403. Update to 3.6.13: - Further features, bug fixes and updated...