PT-2023-26775 · Unknown · Snmp Web Pro

Name of the Vulnerable Software and Affected Versions: SNMP Web Pro version 1.1 Description: An issue in the software allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted request. Recommendations: For SNMP Web Pro version 1.1, consider disabling the...

PT-2023-27637 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HKcms version 2.3.0.230709 Description: The issue allows for Cross Site Scripting XSS, enabling the theft of administrator cookies. Recommendations: For HKcms version 2.3.0.230709, at the moment, there is no information about a newer version...

PT-2023-23132 · Tsplus · Tsplus Remote Access

Name of the Vulnerable Software and Affected Versions: TSplus Remote Access versions through 16.0.2.14 Description: An issue was discovered where credentials are stored as cleartext within the HTML source code of the login page. Recommendations: For versions through 16.0.2.14, consider disabling...

CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...

PT-2023-30958 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository instantsoft/icms2. This allows an attacker to make unauthorized requests on behalf of the server...

Use After Free in vim/vim

...

BELL-CVE-2023-39321

Bulletin has no description...

BELL-CVE-2023-39322

Bulletin has no description...

CVE-2023-39321 Panic when processing post-handshake message on QUIC connections in crypto/tls

Processing an incomplete post-handshake message for a QUIC connection can cause a panic...

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2023-12119 · Mofi Network · Mofi4500-4Gxelte-V2

Name of the Vulnerable Software and Affected Versions: MoFi Network MOFI4500-4GXeLTE-V2 version 3.5.6-xnet-5052 Description: An issue was discovered that allows attackers to bypass authentication and execute arbitrary code via a crafted HTTP request. Recommendations: For MoFi Network...

CVE-2021-36021

Magento versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverage this vulnerability to achieve remote code...

BELL-CVE-2023-4623

Bulletin has no description...

CVE-2023-41940

Jenkins TAP Plugin 2.3 and earlier does not escape TAP file contents, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control TAP file contents...

PT-2023-27163 · Tp Link · Archer C5400

Name of the Vulnerable Software and Affected Versions: Archer C5400 versions prior to Archer C5400JP V2 230506 Description: The issue allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Recommendations: For versions prior to Archer C5400JP V2 230506, update the...

CVE-2023-41009

File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header...

CVE-2023-41909

An issue was discovered in FRRouting FRR through 9.0. bgpnlriparseflowspec in bgpd/bgpflowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference...

PT-2023-22922 · Unknown · Lmsassemblytrackerctc

Name of the Vulnerable Software and Affected Versions: LmsAssemblyTrackerCTC versions prior to SMR Sep-2023 Release 1 Description: The issue allows a local attacker to gain arbitrary file access through PendingIntent hijacking in LmsAssemblyTrackerCTC. Recommendations: For versions prior to SMR...

PT-2023-25124 · Unknown · Bma Personnel Tracking System

Name of the Vulnerable Software and Affected Versions: BMA Personnel Tracking System versions before 20230904 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The...