Alessandro Magnosi

**Name of the Vulnerable Software and Affected Versions** Sricam DeviceViewer version 3.12.0.1 **Description** The software contains a local buffer overflow in the user management add user function. Authenticated attackers can execute arbitrary code by bypassing data execution prevention. An attacker can inject a malicious payload through the `Username` field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets. The vulnerable function is `addUser()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foscam Video Management System version 1.1.6.6 **Description** A buffer overflow occurs in the `UID` field, allowing local attackers to crash the application by providing an excessively long string. Specifically, inputting a 5000-character buffer into the `UID` parameter during device addition triggers the crash when the `Login Check()` function is invoked. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sricam DeviceViewer version 3.12.0.1 **Description** An authenticated user can bypass password validation and set a new password by injecting a large payload into the old password parameter during the password change process. The issue allows attackers to change passwords without knowing the current password. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CoreHR Core Portal versions prior to 27.0.8 **Description** A problematic issue was found, affecting an unknown function, which leads to cross site request forgery. The manipulation can be launched remotely. **Recommendations** For versions prior to 27.0.8, upgrade to version 27.0.8 to address this issue.

**Name of the Vulnerable Software and Affected Versions** Sricam IP CCTV Camera (affected versions not specified) **Description** A critical issue affects the Device Viewer component, leading to memory corruption through unknown processing. The manipulation requires a local approach. The issue has been publicly disclosed and may be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CoreHR Core Portal versions prior to 27.0.7 **Description** The issue allows for stored XSS, which can lead to malicious script execution. **Recommendations** For versions prior to 27.0.7, update to version 27.0.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Sitemagic CMS version 4.4.1 **Description** The issue is related to a Cross-Site-Scripting (XSS) vulnerability due to the failure to validate user input. This allows for JavaScript injection within both GET or POST requests. The affected components are index.php and upgrade.php, where the injection can occur via a crafted URL or via the `UpgradeMode` POST parameter. **Recommendations** For Sitemagic CMS version 4.4.1, consider validating user input to prevent JavaScript injection, and restrict access to the index.php and upgrade.php components until a fix is available. As a temporary workaround, avoid using the `UpgradeMode` parameter in POST requests to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Sitemagic CMS version 4.4.1 **Description** The issue is related to a Cross-Site-Request-Forgery (CSRF) problem, where the software fails to validate incoming requests. This allows the execution of critical functionalities via spoofed requests, which could be exploited by a remote unauthenticated attacker to trick users into performing unwarranted actions. **Recommendations** For Sitemagic CMS version 4.4.1, consider implementing a request validation method to prevent CSRF attacks, such as token-based validation or header-based validation, until a patch is available. As a temporary workaround, restrict access to critical functionalities to minimize the risk of exploitation.