BELL-CVE-2024-41038

Bulletin has no description...

PT-2024-27789 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to escalate privileges. The issue is exploited via the "page" parameter to the "/php-lfis/admin/index.php" API endpoint...

BELL-CVE-2024-40995

Bulletin has no description...

BELL-CVE-2024-40989

Bulletin has no description...

BELL-CVE-2024-40971

Bulletin has no description...

BELL-CVE-2024-40945

Bulletin has no description...

BELL-CVE-2024-40940

Bulletin has no description...

BELL-CVE-2024-40928

Bulletin has no description...

BELL-CVE-2024-40910

Bulletin has no description...

BELL-CVE-2024-40905

Bulletin has no description...

BELL-CVE-2024-39505

Bulletin has no description...

CVE-2024-40130

open5gs v2.6.4 is vulnerable to Buffer Overflow. via /lib/core/abts.c...

BELL-CVE-2024-39476

Bulletin has no description...

CGA-RP72-VQP7-5JGW

Bulletin has no description...

BELL-CVE-2024-29507

Bulletin has no description...

PYSEC-2024-176

A reflected Cross-Site Scripting XSS vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability exists due to improper neutralization of input during web page generation, specifically within the survey redirect parameter. This flaw allows an attacker to redirect users to a...

CVE-2024-5935 CSRF Vulnerability in imartinez/privategpt

A Cross-Site Request Forgery CSRF vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users...

CVE-2024-6038 ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt

A Regular Expression Denial of Service ReDoS vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filterhistory function within the utils.py module. This function takes a user-provided keyword and attempts to match it against chat history...

BELL-CVE-2024-38385

Bulletin has no description...

Sensitive Information Disclosure

zendframework/zend-developer-tools is vulnerable to Sensitive Information Disclosure. The vulnerability is due to a change made during the update to support PHP 7.3 that potentially prevents toolbar entries, which are enabled by default, from being disabled. The attacker can exploit this by...