Sajjadbnd

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the backup file, exposing router passwords and other sensitive configuration data.

Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting the networkSetup.htm endpoint with parameters usnm, usps, and cfps to modify the admin username and password without user consent.

**Name of the Vulnerable Software and Affected Versions** NextVPN versão 4.10 **Description** Permissões de arquivo inseguras permitem que usuários locais modifiquem arquivos executáveis com direitos de acesso total. Isso pode levar à substituição de executáveis do sistema por arquivos maliciosos, permitindo que um invasor obtenha privilégios de SYSTEM ou Administrador por meio da modificação não autorizada de arquivos. **Recommendations** No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Product Key Explorer version 4.2.0.0 **Description** The software contains a flaw that allows local attackers to cause a denial of service by crashing the application. This occurs due to a buffer overflow in the registration name input field. An attacker can create a specially crafted text file containing repeated characters. Pasting this file into the registration name field triggers the overflow, leading to an application crash. The vulnerable input field is the registration name field. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AnyDesk version 5.4.0 **Description** AnyDesk 5.4.0 has an issue with an unquoted service path in its Windows service configuration. This could allow local attackers to inject malicious executables. Exploiting the unquoted binary path enables attackers to place malicious files in service executable locations, potentially leading to elevated system privileges. **Recommendations** Update to a newer version of AnyDesk that addresses the unquoted service path issue.