Lucas Yang

**Name of the Vulnerable Software and Affected Versions** Multisuns EasyLog web+ (affected versions not specified) **Description** The issue is related to incorrect code generation management in the software. It allows an unauthenticated remote attacker to exploit the code injection vulnerability, enabling them to inject code and access the system. This access can be used to perform arbitrary system operations or disrupt service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Multisuns EasyLog web+ (affected versions not specified) **Description** The issue is related to the use of hard-coded credentials in Multisuns EasyLog web+. A remote attacker can exploit this to access the system, perform arbitrary system operations, or disrupt service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Multisuns EasyLog web+ (affected versions not specified) **Description** The issue is related to a path traversal vulnerability within a specific parameter in a URL. This allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hitron Technologies CODA-5310 (affected versions not specified) **Description** The issue is related to the Telnet function in the Hitron Technologies CODA-5310, which uses a default account and password without prompting users to change them. This allows an unauthenticated remote attacker to exploit the weakness in the authentication procedure, potentially gaining administrator privileges. As a result, the attacker can perform arbitrary system operations or disrupt the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hitron Technologies CODA-5310 (affected versions not specified) **Description** The issue concerns the Telnet function of the Hitron Technologies CODA-5310, which transfers sensitive data in plaintext. This allows an unauthenticated remote attacker to exploit the vulnerability and access the credentials of both normal users and administrators. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hitron Technologies CODA-5310 (affected versions not specified) **Description** The issue is related to insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface. This can result in the attacker performing arbitrary system operations or disrupting the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Moxa MiiNePort E1 (affected versions not specified) **Description** The issue is related to insufficient access control, allowing an unauthenticated remote user to exploit the vulnerability and perform arbitrary system operations or disrupt service. This can enable a remote attacker to access the system configuration interface to view, modify, or terminate services. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do software vulnerável e versões afetadas** Sistema de Gestão de Pessoal e Folha de Pagamento Le-yan (versões afetadas não especificadas) **Descrição** O problema diz respeito à presença de nomes de conta e senhas de banco de dados codificados diretamente no código-fonte do site. Isso permite que um invasor remoto não autenticado acesse, modifique dados do sistema ou interrompa o serviço. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Draytek VigorAP910C (versões afetadas não especificadas) **Descrição** O problema diz respeito a uma vulnerabilidade no SNMP do Draytek VigorAP910C que não pode ser desativada, podendo levar ao vazamento de informações. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.