CVE-2023-23941 SwagPayPal payment not sent to PayPal correctly

SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used PayPal Plus, Smart Payment Buttons, SEPA, Pay Later, Venmo, Credit card, the amount and item list sent to PayPal may not be identical to the one in the created order. The problem has bee...

CVE-2023-23925 Switcher Client contains Regular Expression Denial of Service (ReDoS)

Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows into Strategy match operation EXIST, where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack reDOS. This issue has been...

CVE-2023-23925 Switcher Client contains Regular Expression Denial of Service (ReDoS)

Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows into Strategy match operation EXIST, where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack reDOS. This issue has been...

PT-2023-18839 · Mojojson · Mojojson

Name of the Vulnerable Software and Affected Versions: MojoJson version 1.2.3 Description: An issue was found that allows attackers to execute arbitrary code via the destroy function. Recommendations: For MojoJson version 1.2.3, consider disabling the destroy function as a temporary workaround...

PT-2023-12275 · Imcat · Imcat

Name of the Vulnerable Software and Affected Versions: imcat version 5.4 Description: The issue allows remote attackers to escalate privilege via a lack of token verification, which is a result of a Cross Site Request Forgery vulnerability. Recommendations: For imcat version 5.4, consider...

PT-2023-3022 · Telegram · Telegram

Name of the Vulnerable Software and Affected Versions: Telegram versions 9.3.1 through 9.4.0 Description: The issue is related to insufficient access control in Telegram, allowing remote attackers to access restricted files, the microphone, or video recording. This is achieved via the DYLD INSERT...

PT-2023-2471 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 24.0.9 Nextcloud Server versions prior to 25.0.3 Description: The issue is related to the handling of shared resources with the same name in Nextcloud Server, particularly when a memory cache is configured. ...

GHSA-QWX8-MXXX-MG96 wallabag contains Improper Authorization via export feature

Description The export feature lets a user export a single entry or a set of entries in a given format e.g. PDF, MOBI, TXT. For example, https://yourinstance.wallabag.org/export/45.pdf will export the entry with id 45 in PDF format. Since wallabag 2.0.0-alpha.1, this feature is vulnerable to an...

PT-2023-16424 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /home/kickPlayer. The manipulation of the userId argument leads to command injection. The attack can be...

CVE-2023-23630 Cross-site (XSS) vulnerability with Express API in Eta

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to res.render...

CVE-2023-23630 Cross-site (XSS) vulnerability with Express API in Eta

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to res.render...

PT-2023-1575 · Symfony +4 · Symfony +4

Name of the Vulnerable Software and Affected Versions: Symfony versions prior to 4.4 Description: The issue is related to incorrect session management in Symfony, a PHP framework for web and console applications. When authenticating users, Symfony by default regenerates the session ID upon login...

PT-2023-13023 · Bestechnic · Bestechnic Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Bestechnic Bluetooth Mesh SDK BES2300 version 1.0 Description: A buffer overflow issue can be triggered during provisioning due to the lack of a check for the SegN field of the Transaction Start PDU. This occurs because there is no validation...

PT-2023-12661 · Unknown · Appium-Running +1

Name of the Vulnerable Software and Affected Versions: nemo-appium versions prior to 0.0.9 Description: The issue arises from improper input sanitization in the module.exports.setup function, leading to Command Injection. To exploit this, appium-running 0.1.3 must be installed as one of...

PT-2023-19450 · Dromara · Dromara Hutool

Name of the Vulnerable Software and Affected Versions: Dromara Hutool version 5.8.11 Description: A deserialization issue allows an attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter. This enables the attacker to potentially gain control over the system. Recommendation...

PT-2023-15596 · Unknown · Easy Images

Name of the Vulnerable Software and Affected Versions: Easy Images version 2.0 Description: The issue allows for an arbitrary file download via the /application/down.php component. It is exploited through a crafted GET request. Recommendations: For Easy Images version 2.0, consider restricting...

PT-2023-10341 · Unknown · Mosbth Cimage

Name of the Vulnerable Software and Affected Versions: mosbth cimage versions up to 0.7.18 Description: A vulnerability was found in mosbth cimage, affecting an unknown functionality of the file check system.php. The manipulation of the argument $ SERVER'SERVER SOFTWARE' leads to cross site...

PT-2023-4908 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds read in the tiffcp utility, located in tools/tiffcp.c:948, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can lead to ...

PT-2023-1852 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the put weighted pred 8 fallback function at fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted input file...

CVE-2023-23629

Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with greater access to data to create a...