PT-2021-17106 · Sangoma +1 · Asterisk +1

Name of the Vulnerable Software and Affected Versions: Sangoma Asterisk versions 13.38.1 through 18.2.0 Certified Asterisk version 16.8-cert5 Description: The issue is related to incorrect access controls in the res srtp.c module, allowing a remote unauthenticated attacker to prematurely terminat...

PT-2020-5777 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to the is protected meta function in the wp-includes/meta.php component of the WordPress content management system. This function incorrectly determines the protection status...

PT-2020-15384

Name of the Vulnerable Software and Affected Versions Gazie version 7.29 Description The issue allows for Cross Site Scripting XSS via the "http://192.168.100.7/gazie/modules/config/admin utente.php" endpoint, specifically through the user name variable. An attacker can inject JavaScript code,...

PT-2020-14078

Name of the Vulnerable Software and Affected Versions Tendenci version 12.0.10 Description The issue concerns unrestricted deserialization in the staff.py file located in apps/helpdesk/views/. This could potentially allow for malicious activities due to the lack of restrictions on what can be...

PT-2016-6204

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 1.4.0 Description The issue allows remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget...

PT-2006-5784 · Joomla · Joomlaboard Forum

Name of the Vulnerable Software and Affected Versions: Joomlaboard Forum Component com joomlaboard versions prior to 1.1.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to specific PHP files, including file upload.php and image...