2869 matches found
PT-2023-27803 · Phpjabbers · Php Jabbers Shuttle Booking
Name of the Vulnerable Software and Affected Versions: PHP Jabbers Shuttle Booking Software version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting an unknown part of the file /index.php. The manipulation leads to cross site scripting, and it is...
SUSE-SU-2023:3059-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to version 115.0.1 bsc1212438: - CVE-2023-3600: Fixed use-after-free in workers bmo1839703. - CVE-2023-3417: Fixed File Extension Spoofing using the Text Direction Override Character bmo1835582. Bugfixe...
PT-2023-11596 · Yunyecms · Yunyecms
Name of the Vulnerable Software and Affected Versions: yunyecms version 2.0.2 Description: The issue allows remote attackers to run arbitrary SQL commands via the XFF variable. This can potentially lead to unauthorized access and manipulation of database content. Recommendations: For yunyecms...
Journal Management Software 1.2.4 SQL Injection
==================================================================================================================================== | Title : Journal Management Software V1.2.4 Sql injection | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bi...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in versions of SolarWinds Platform prior to 2023.3 that stems from vulnerability to an incorrect sequence of behavior that allows a user wit...
PT-2023-13041 · Rtx Trap · Rtx Trap
Name of the Vulnerable Software and Affected Versions: RTX TRAP version 1.0 Description: The issue is related to host header poisoning. Recommendations: For RTX TRAP version 1.0, consider restricting access to vulnerable endpoints to minimize the risk of exploitation. At the moment, there is no...
PT-2023-26179 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue was found in the function actionExport of the component Personal Office Address Book, specifically in the file "?r=contact/default/export". This issue leads to SQL injection and can be...
Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 3
Package name: xms10.15.0.10327.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: July 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this...
PT-2023-13492 · Nikola Loncar · Easyappointments
Name of the Vulnerable Software and Affected Versions: Nikola Loncar Easy Appointments plugin versions prior to 3.11.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
Microsoft Windows Installed Software Version Enumeration
This plugin enumerates the installed software version by interrogating information obtained from various registry entries and files on disk. This plugin provides a best guess at the software version and a confidence level for that version. Note that the versions detected here do not necessarily...
PT-2023-12518 · Osnexus · Quantastor
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An issue allows an administrator to execute commands as root via the alerts management dialog. Recommendations: At the moment, there is no information about a newer version that contain...
PT-2023-21773 · Softmed · Softmed Selfpatron
Name of the Vulnerable Software and Affected Versions: Softmed SelfPatron versions prior to 2.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: Fo...
Ovarro TBox RTU 安全漏洞
Ovarro TBox RTUs is a modular remote monitoring and automation solution from Ovarro Germany. A security vulnerability exists in the Ovarro TBox RTUs that stems from a lack of authorization to run certain API commands, which could be exploited by an attacker to disclose sensitive information, such...
PT-2023-14536 · Unknown · Weblib Ucopia
Name of the Vulnerable Software and Affected Versions: Weblib Ucopia versions prior to 6.0.13 Description: An issue was discovered in the SSH Server of Weblib Ucopia, where it has insecure permissions. Recommendations: For versions prior to 6.0.13, update to version 6.0.13 or later to resolve the...
Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated) Exploit
Exploit Title: Smart Office Web 20.28 - Remote Information Disclosure Unauthenticated Shodan Dork:: inurl:"https://www.shodan.io/search?query=smart+office" Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://smartofficepayroll.com/ Software Link:...
SUSE-SU-2023:2572-1 Security update for salt
This update for salt fixes the following issues: - Update to Salt release version 3006.0 jscPED-4361 See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency...
Inpiazza Cloud WiFi 安全漏洞
Inpiazza Cloud WiFi is an innovative artificial intelligence platform from Inpiazza, Inc. that allows digital interactions via WiFi interactions. A security vulnerability exists in Inpiazza Cloud WiFi versions prior to v4.2.17 that stems from the portal not enforcing a limit on the number of...
CVE-2023-23954
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...