PT-2024-23283 · Supsystic · Supsystic Slider

Name of the Vulnerable Software and Affected Versions: Supsystic Slider by Supsystic versions 1.8.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

PT-2024-13516 · Unknown · Terry Lin Wp Githuber Md

Name of the Vulnerable Software and Affected Versions: Terry Lin WP Githuber MD versions 1.16.2 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which can be exploited. No information is provided about the estimated number of potentially affecte...

PT-2024-23245

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions 4.0.26 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2024-19334 · Nsquared · N Squared Simply Schedule Appointments

Name of the Vulnerable Software and Affected Versions: N Squared Simply Schedule Appointments versions 1.6.6.20 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2024-13528

Name of the Vulnerable Software and Affected Versions: WP Child Theme Generator versions 1.0.9 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WP Child Theme Generator. This allows for the upload of files with potentially...

PT-2024-23281 · Themeisle · Multiple Page Generator Plugin

Name of the Vulnerable Software and Affected Versions: Multiple Page Generator Plugin – MPG versions 3.4.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Themeisle Multiple Page Generator Plugin – MPG. This vulnerability allows unauthorized access du...

PT-2024-11608 · Themehunk · Themehunk Advance Wordpress Search Plugin

Name of the Vulnerable Software and Affected Versions: ThemeHunk Advance WordPress Search Plugin versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the ThemeHunk Advance WordPress Search Plugin. Recommendations: For ThemeHunk Advance WordPress...

PT-2024-11703 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Muffingroup Betheme, allowing unauthorized access. Recommendations: For versions through 26.6.1...

PT-2024-11702 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Muffingroup Betheme, allowing unauthorized access. Recommendations: For versions through 26.6.1...

PT-2024-11976

Name of the Vulnerable Software and Affected Versions MainWP Wordfence Extension versions through 4.0.7 Description The issue is related to a Missing Authorization vulnerability in the MainWP Wordfence Extension. Recommendations For versions through 4.0.7, update to a version later than 4.0.7 to...

PT-2024-20059 · Clickup · Clickup Desktop

Name of the Vulnerable Software and Affected Versions: ClickUp Desktop versions prior to 3.3.77 Description: The issue allows code injection due to specific Electron Fuses, with inadequate protection against code injection through settings such as RunAsNode. This affects both macOS and Windows...

PT-2024-22191 · Typps · Typps Calendarista Basic Edition

Name of the Vulnerable Software and Affected Versions: Typps Calendarista Basic Edition versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potential malicious script...

Important: nodejs

Issue Overview: A flaw was found in Node.js. On Linux, Node.js ignores certain environment variables if they have been set by an unprivileged user while the process is running with elevated privileges, with the exception of CAPNETBINDSERVICE. Due to a bug in the implementation of this exception,...

Important: nodejs

Issue Overview: A flaw was found in Node.js. On Linux, Node.js ignores certain environment variables if they have been set by an unprivileged user while the process is running with elevated privileges, with the exception of CAPNETBINDSERVICE. Due to a bug in the implementation of this exception,...

PT-2024-22186 · WordPress · Wp Responsive Tabs Horizontal Vertical/Accordion Tabs

Name of the Vulnerable Software and Affected Versions: WP Responsive Tabs horizontal vertical and accordion Tabs versions 1.1.17 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to stored cross-site scripting XSS. This...

PT-2024-23088 · Kerlink +1 · Kerlink Firewall +2

Name of the Vulnerable Software and Affected Versions: ChirpStack chirpstack-mqtt-forwarder versions 4.2.0 and earlier ChirpStack chirpstack-gateway-bridge versions 4.0.10 and earlier Description: The Kerlink firewall in ChirpStack wrongly accepts certain TCP packets when a connection is not in t...

PT-2024-11758 · Unknown · Ajax Thumbnail Rebuild

Name of the Vulnerable Software and Affected Versions: AJAX Thumbnail Rebuild versions 1.13 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the AJAX Thumbnail Rebuild software. Recommendations: For versions 1.13 and earlier, updat...

PT-2024-5022 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: Qlik Qlikview versions prior to May 2022 SR3 12.70.20300 and prior to May 2023 SR2 12.80.20200 Description: A race condition in the installer executable may allow an existing lower privileged user to cause code to be executed in the context o...

PT-2024-12520 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0.2 Description: The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information using man-in-the-middle techniques. Th...

PT-2024-22752 · Unknown · Contact Form 7 – Paypal & Stripe Add-On

Name of the Vulnerable Software and Affected Versions: Contact Form 7 – PayPal & Stripe Add-on versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...