PT-2024-38795 · Unknown · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical vulnerability has been found in the SourceCodester E-Commerce System, affecting unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The...

PT-2024-40356 · Unknown · Laravel Framework

Name of the Vulnerable Software and Affected Versions: Laravel Framework affected versions not specified Description: The issue arises when a field, normally a non-array value, is crafted as an array in a request and this input is not validated or cast to its expected type before being passed to...

PT-2024-13272 · Unknown · Webreports

Name of the Vulnerable Software and Affected Versions: WebReports affected versions not specified Description: The issue allows an administrative user of WebReports to perform a Cross Site Scripting XSS and/or Man in the Middle MITM exploit through SAML configuration. Recommendations: At the...

PT-2023-25431 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: JerryScript version 3.0 Description: The issue allows remote attackers to execute arbitrary code via the ecma stringbuilder append raw component at /jerry-core/ecma/base/ecma-helpers-string.c. This is a Buffer Overflow vulnerability...

PT-2023-24004 · Unknown · E-Excellence U-Office Force

Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The issue is related to a path traversal vulnerability within the file uploading and downloading functions. An unauthenticated remote attacker can exploit this to read...

Home Assistant Detection Consolidation

Consolidation of Home Assistant detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

PT-2023-11821 · Unknown · Youngerheart Nodeserver

Name of the Vulnerable Software and Affected Versions: youngerheart nodeserver affected versions not specified Description: A critical vulnerability has been found in youngerheart nodeserver, affecting an unknown functionality of the file nodeserver.js. The manipulation leads to path traversal...

PT-2022-9031 · Unknown · Chris92De Adminserv

Name of the Vulnerable Software and Affected Versions: Chris92de AdminServ affected versions not specified Description: A vulnerability was found in Chris92de AdminServ, affecting unknown code of the file resources/core/adminserv.php. The manipulation of the text argument leads to cross-site...

PT-2022-24973 · Unknown · Eolinker Goku Lite

Name of the Vulnerable Software and Affected Versions: eolinker goku lite affected versions not specified Description: A critical issue was found in the software, affecting the /plugin/getList file. The manipulation of the route/keyword argument leads to SQL injection. The attack can be initiated...

PT-2022-16254 · Unknown · Securegate

Name of the Vulnerable Software and Affected Versions: SecureGate affected versions not specified Description: The issue involves SQL-Injection using login without password and a path traversal vulnerability during file transfer. An attacker can exploit these to obtain privileges, execute remote...

PT-2021-6285 · Microsoft · Windows Storage Services +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Services affected versions not specified Description: The issue is related to information disclosure in the Windows Storage Services of the Microsoft Windows operating system. It allows an attacker to obtain sensitive...

PT-2021-17406 · Unknown · Serenityos

Name of the Vulnerable Software and Affected Versions: SerenityOS affected versions not specified Description: The issue allows an attacker to obtain sensitive information, depending on the context, due to a buffer overflow. This occurs in the Crypto::der decode sequence function, specifically wh...

Symantec pcAnywhere Access Server Remote Detection

Detection of Symantec pcAnywhere Access Server. The script sends a connection request to the server and attempts to extract the response. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

PT-2003-1220 · Unknown · Db4Web Server

Name of the Vulnerable Software and Affected Versions: DB4Web server affected versions not specified Description: The issue allows remote attackers to use the DB4Web server as a proxy and attempt TCP connections to other systems, effectively performing a port scan. This is achieved by requesting ...