Michaå Majchrowicz

**Nome do Software Vulnerável e Versões Afetadas** Versões do Hackney anteriores à 1.24.0 **Descrição** O problema decorre da falha do Hackney em liberar adequadamente as conexões HTTP ao pool após o tratamento de respostas 307 Temporary Redirect. Isso permite que atacantes remotos esgotem os pools de conexão, resultando em negação de serviço em aplicações que utilizam a biblioteca. **Recomendações** Para versões anteriores à 1.24.0, atualize para a versão 1.24.0 para resolver o problema.

**Name of the Vulnerable Software and Affected Versions** Smartwares cameras versions up to 3.3.0 **Description** The issue concerns command injection during the initialization process of the cameras. When a user provides Access Point credentials through a mobile app, the input is not properly sanitized, allowing for command injection. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. The vendor has not replied to reports, so the patching status remains unknown. **Recommendations** For versions up to 3.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Smartwares cameras versions up to 3.3.0 **Description** The issue concerns the sharing of the same credentials for the telnet service among Smartwares cameras, including models CIP-37210AT and C724IP, which run firmware versions up to 3.3.0. An attacker with physical access to the SPI connected memory can retrieve the hash of the password. The telnet service is enabled when a specific folder is created on the inserted SD card. The patching status and the range of affected devices and firmware versions remain unknown due to the vendor's lack of response. It is also possible that newer firmware versions may be vulnerable. **Recommendations** For versions up to 3.3.0, consider disabling the telnet service as a temporary workaround until the patching status is confirmed. Restrict access to the SPI connected memory to minimize the risk of exploitation. Avoid using the affected firmware versions until the vendor provides a fix or confirmation of the patching status. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Smartwares cameras versions up to 3.3.0 **Description** The issue allows for path traversal attacks, enabling access to sensitive information by manipulating file paths. When connected to a mobile app, affected devices open port 10000, allowing users to download pictures by providing specific file paths. However, the directories accessible to users are not properly restricted, facilitating the path traversal attacks. The vendor has not responded to reports, and the patching status is unknown. **Recommendations** For versions up to 3.3.0, as a temporary workaround, consider restricting access to port 10000 when not in use, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do Software Vulnerável e Versões Afetadas** Kentico CMS versão 7 **Descrição** O problema consiste em um ataque XSS refletido que ocorre através da manipulação de um parâmetro específico da requisição GET enviado ao endpoint "/CMSMessages/AccessDenied.aspx". O suporte para a versão 7 do Kentico CMS encerrou em 2016. Observa-se que a versão 8 não apresenta este problema. **Recomendações** Para a versão 7 do Kentico CMS, como o suporte foi encerrado e esta versão é vulnerável, considere atualizar para uma versão com suporte para mitigar o risco. Como medida temporária, considere restringir o acesso ao endpoint "/CMSMessages/AccessDenied.aspx" até que uma solução mais permanente possa ser aplicada. Evite utilizar o parâmetro de requisição GET vulnerável neste endpoint para minimizar o risco de exploração.