Secsys-Fdu

Name of the Vulnerable Software and Affected Versions Deep Thought Industries ACE Scanner PDF Scanner versão 1.4.5 Description Uma falha existe no Deep Thought Industries ACE Scanner PDF Scanner versão 1.4.5 que permite sobrescrever arquivos internos críticos através do processo de importação de arquivos. A exploração bem-sucedida pode levar à execução de código arbitrário ou divulgação de informações. Recommendations Atualize para uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Name of the Vulnerable Software and Affected Versions Docudepot PDF Reader: PDF Viewer APP versão 1.0.34 Description Uma falha existe no Docudepot PDF Reader: PDF Viewer APP versão 1.0.34 que permite que invasores sobrescrevam arquivos internos críticos por meio do processo de importação de arquivos. A exploração bem-sucedida desta falha pode levar à execução de código arbitrário ou à exposição de informações. Recommendations Atualize o Docudepot PDF Reader: PDF Viewer APP para uma versão mais recente que resolva este problema. Como medida temporária, evite importar arquivos não confiáveis.

Name of the Vulnerable Software and Affected Versions Ora Tools PDF Reader versões 4.3.5 Description Uma falha existe no Ora Tools PDF Reader que permite sobrescrever arquivos internos críticos através do processo de importação de arquivos. Isso pode levar à execução de código arbitrário ou divulgação de informações. Recommendations Atualize para uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Name of the Vulnerable Software and Affected Versions Tinybeans Private Family Album App versão 5.9.5-prod Description Um problema de sobrescrita de arquivos existe no Tinybeans Private Family Album App versão 5.9.5-prod. Atacantes podem sobrescrever arquivos internos críticos por meio do processo de importação de arquivos, potencialmente levando à execução arbitrária de código ou divulgação de informações. Recommendations No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** DSAI-Cline (affected versions not specified) **Description** The command auto-approval module in DSAI-Cline has a critical OS command injection issue that bypasses its whitelist security. The system uses string-based parsing for command validation, blocking operators like ;, &&, ||, |, and command substitution, but it does not handle newline characters within the input. An attacker can embed a newline character between a permitted command and malicious code (for example, `git log malicious command`). DSAI-Cline incorrectly identifies this as a safe operation and automatically approves it. The PowerShell interpreter then executes both commands sequentially, leading to Remote Code Execution without user interaction. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ridvay Code (affected versions not specified) **Description** The command auto-approval module contains a critical OS command injection issue that bypasses its whitelist security mechanism. The system uses regular expressions to parse commands, but these expressions are insufficient to prevent exploitation through Shell command substitution using `$(...)` and backticks (`...`). An attacker can inject malicious code within arguments, such as in a `git log --grep="$(malicious command)"` command, which the system incorrectly identifies as safe. This allows for Remote Code Execution without user interaction. The `git log` API endpoint is vulnerable, specifically with the `grep` parameter. The vulnerable variable is `malicious command`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions DeftPDF Document Translator versão 54.0 Description Uma falha existe no DeftPDF Document Translator v54.0 que permite que invasores sobrescrevam arquivos internos críticos por meio do processo de importação de arquivos. Isso pode levar à execução de código arbitrário ou à exposição de informações. A vulnerabilidade não requer autenticação e pode ser explorada remotamente. Recommendations No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Name of the Vulnerable Software and Affected Versions MaruNuri LLC versão 2.0.23 Description Uma falha existe no MaruNuri LLC versão 2.0.23 que permite sobrescrever arquivos internos críticos através do processo de importação de arquivos. Isso pode levar à execução de código arbitrário ou exposição de informações. A questão não requer autenticação. Recommendations Atualize para uma versão mais recente que contenha uma correção para esta vulnerabilidade.

An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

**Name of the Vulnerable Software and Affected Versions** Sixth (affected versions not specified) **Description** The software features automatic terminal command execution with two modes: 'Execute safe commands' and 'Execute all commands'. The 'Execute safe commands' mode is designed to automatically run commands deemed safe by the model, requiring user approval for potentially destructive commands. However, this design is prone to prompt injection attacks. An attacker can use a template to disguise malicious commands as 'safe' commands, bypassing the approval requirement and enabling arbitrary command execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** InfCode (affected versions not specified) **Description** The terminal auto-execution module in InfCode has a critical command filtering issue that makes its blacklist ineffective. The blacklist does not include native high-risk commands in Windows PowerShell, such as `powershell`. The matching algorithm cannot recognize string concatenation, variable assignment, or double-quote interpolation in Shell syntax, preventing dynamic semantic parsing. Attackers can bypass interception using simple syntax obfuscation. A malicious file containing instructions for remote code injection can be created. When a user imports and views this file in the IDE, the Agent executes dangerous PowerShell commands outside the blacklist without user confirmation, potentially leading to arbitrary command execution or sensitive data leakage. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ridvay Code (affected versions not specified) **Description** The command auto-approval module in Ridvay Code has a critical OS command injection issue that bypasses its whitelist security. The system uses weak regular expressions to analyze commands, failing to prevent Shell command substitution using `$(...)` and backticks (`...`). An attacker can inject malicious code into commands, such as `git log --grep="$(malicious command)"`, which the system incorrectly identifies as safe, leading to Remote Code Execution without user interaction. The `whitelist` security mechanism is ineffective. The vulnerable component relies on fragile regular expressions to parse command structures. The underlying Shell prioritizes the execution of the malicious code injected within the arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure.

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

**Name of the Vulnerable Software and Affected Versions** Roo Code (affected versions not specified) **Description** The command auto-approval module in Roo Code has a critical operating system command injection flaw that bypasses its whitelist security. The system uses weak regular expressions to analyze commands and fails to account for Shell command substitution using `$(...)` and backticks. An attacker can inject malicious code into commands, such as `git log --grep="$(malicious command)"`, which the system incorrectly identifies as safe, leading to automatic approval and Remote Code Execution without user interaction. The underlying Shell prioritizes the execution of the injected malicious code within the arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.