Linfeng

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is related to insufficient access controls in the Windows Hyper-V hardware virtualization system, allowing an attacker to potentially elevate their privileges by sending specially crafted requests. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows DHCP Server Service (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows DHCP Server Service, which can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is related to a lack of protection for sensitive data in the Windows Hyper-V system, which can allow an attacker to disclose protected information. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WSTMart version 2.0.7 **Description** The issue is related to a CSRF problem. It affects the `index.php/admin/staffs/add.html` API endpoint. **Recommendations** For version 2.0.7, consider implementing proper CSRF protection mechanisms to prevent exploitation. As a temporary workaround, restrict access to the `index.php/admin/staffs/add.html` endpoint until a patch is available.