David Cámara Galindo

**Nome do software vulnerável e versões afetadas** HelpDeskZ versões 2.0.2 e anteriores **Descrição** Foi detectada uma vulnerabilidade de Cross-Site Scripting (XSS) no HelpDeskZ. Essa vulnerabilidade poderia permitir que um invasor enviasse um código JavaScript malicioso no campo `email` e assumisse parcialmente o controle da sessão do navegador de um usuário autenticado. **Recomendações** Para as versões 2.0.2 e anteriores, como solução temporária, considere restringir o uso do campo `email` até que uma correção esteja disponível. No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Repox (affected versions not specified) **Description** An authentication bypass issue has been found, allowing a remote user to send a specially crafted POST request due to the lack of any authentication method. This results in the alteration or creation of users. The issue can be exploited by sending a specially crafted request to the affected system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Repox (affected versions not specified) **Description** An XSS issue has been detected, allowing an attacker to compromise interactions between a user and the vulnerable application. This can be exploited by a third party sending a specially crafted JavaScript payload to a user, thus gaining full control of their session. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Repox (affected versions not specified) **Description** A stored XSS vulnerability has been identified in Repox, allowing a local attacker to store a specially crafted JavaScript payload on the server due to the lack of proper sanitisation of field elements. This enables the attacker to trigger the malicious payload when the application loads. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Repox (affected versions not specified) **Description** An XEE vulnerability has been found in Repox, allowing a remote attacker to interfere with the application's XML data processing in the `fileupload` function. This results in interaction between the attacker and the server's file system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Repox (affected versions not specified) **Description** A path traversal vulnerability has been detected, allowing an attacker to read arbitrary files on the running server. This results in the disclosure of sensitive information, including application code or data, backend credentials, and operating system files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Repbox (affected versions not specified) **Description** An unrestricted file upload vulnerability has been identified, allowing an attacker to upload malicious files via the `transforamationfileupload` function due to the lack of proper file type validation controls, resulting in a full system compromise. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OJS (affected versions not specified) **Description** A Cross-Site Request Forgery (CSRF) attack has been discovered, which forces an end user to execute unwanted actions on a web application in which they are currently authenticated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ICS Business Manager version 7.06.0028.7089 **Description** A SQL injection issue has been discovered, allowing a remote user to send a specially crafted SQL query to retrieve all database information. The data can also be modified or deleted, causing application malfunction. **Recommendations** For ICS Business Manager version 7.06.0028.7089, update to a version that includes a fix for this SQL injection issue to prevent potential data breaches and application malfunctions.

**Name of the Vulnerable Software and Affected Versions** ICS Business Manager version 7.06.0028.7066 **Description** A security issue has been identified, allowing a remote attacker to send a specially crafted string, exploiting the `obdd act` parameter. This could enable the attacker to steal an authenticated user's session and perform actions within the application. **Recommendations** For ICS Business Manager version 7.06.0028.7066, consider restricting access to the `obdd act` parameter until a patch is available. As a temporary workaround, avoid using the `obdd act` parameter in sensitive operations to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Zebra Technologies ZTC ZT410-203dpi ZPL printer (affected versions not specified) **Description** A vulnerability has been found that allows an attacker on the same network as the printer to bypass authentication. This is achieved by sending a specially crafted POST request to the "setvarsResults.cgi" file, enabling the attacker to change the username and password for the Web Page. The printer's protected mode must be disabled for this vulnerability to be exploitable. **Recommendations** For the Zebra Technologies ZTC ZT410-203dpi ZPL printer, consider enabling the protected mode to prevent exploitation until a fix is available. As a temporary workaround, restrict access to the "setvarsResults.cgi" file to minimize the risk of exploitation. Avoid using the printer on a network where the protected mode is disabled until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Conacwin version 3.7.1.2 **Description** A blind SQL injection issue exists in the Conacwin web interface, allowing a local attacker to obtain sensitive database data by sending a specially crafted SQL query to the `xml` parameter. This could potentially lead to the exposure of sensitive information. **Recommendations** For Conacwin version 3.7.1.2, consider restricting access to the xml parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the `xml` parameter in the affected web interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netman-204 version 02.05 **Description** The issue is related to a CSRF vulnerability that allows an attacker to change administrator passwords due to the lack of proper validation on the CSRF token. This could enable a remote attacker to access the administrator panel and modify critical parameters for industrial operations. **Recommendations** For Netman-204 version 02.05, consider implementing proper validation on the CSRF token to prevent Cross Site Request Forgery attacks. As a temporary workaround, restrict access to the administrator panel to minimize the risk of exploitation.

**Nome do software vulnerável e versões afetadas** Editor tinymce (versões afetadas não especificadas) **Descrição** Foi identificada uma vulnerabilidade de cross-site scripting armazenado na seção de comentários da criação de relatórios, causada por uma versão obsoleta do editor tinymce. Para explorar essa vulnerabilidade, os invasores precisam de uma conta com privilégios suficientes para visualizar e editar relatórios. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.