Aden Yap

**Name of the Vulnerable Software and Affected Versions** Mage AI version 0.9.75 **Description** A vulnerability was found in Mage AI, which has been classified as problematic. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high and the exploitability is told to be difficult. The real existence of this vulnerability is still doubted at the moment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-Link Tapo C100 versions 1.1.15 Build 211130 Rel.15378n(4555) and before **Description** The issue is related to the HTTP service of the TP-Link Tapo C100 IP camera's firmware, specifically with the handling of CRLF sequences in HTTP headers. This can be exploited by an attacker to cause a Denial of Service (DoS) via crafted web requests. **Recommendations** For TP-Link Tapo C100 versions 1.1.15 Build 211130 Rel.15378n(4555) and before, consider disabling the HTTP service until a patch is available to prevent potential Denial of Service (DoS) attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.