Boku

**Name of the Vulnerable Software and Affected Versions** FTP Commander Pro version 8.03 **Description** The software contains a local stack overflow that allows for the execution of arbitrary code. An attacker can overwrite the EIP register by providing a crafted input through a custom command. A malicious payload of 4108 bytes can be used to overwrite memory and execute shellcode, potentially leading to remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FTP Navigator version 8.03 **Description** FTP Navigator version 8.03 contains a stack overflow that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. An attacker can create a malicious payload that causes a buffer overflow when pasted into the Custom Command textbox, leading to remote code execution. As a proof of concept, the calculator can be launched. A Structured Exception Handler (SEH) is a mechanism in Windows operating systems that handles exceptions during program execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Domain Quester Pro version 6.02 **Description** Domain Quester Pro 6.02 contains a stack overflow that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload targeting the 'Domain Name Keywords' input field to trigger an access violation and potentially execute a bind shell on port 9999. A stack overflow occurs when a program attempts to write data beyond the allocated memory buffer on the call stack, potentially overwriting adjacent memory locations and causing unexpected behavior or program crashes. Structured Exception Handler (SEH) is a mechanism in Windows operating systems for handling exceptions, and overwriting these registers can allow an attacker to redirect control flow to malicious code. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AVS Audio Converter version 9.1.2.600 **Description** AVS Audio Converter is affected by a stack overflow issue. An attacker can execute arbitrary code by manipulating the output folder text input. Specifically, crafting a malicious payload allows overwriting stack memory, potentially triggering a bind shell on port 9999 when the 'Browse' button is clicked. The vulnerability occurs when processing user-supplied input for the output folder path. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Torrent 3GP Converter version 1.51 **Description** A stack overflow allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. This is achieved by crafting a malicious payload targeting the application registration dialog to trigger a buffer overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BOOTP Turbo version 2.0 **Description** A denial of service issue exists that allows attackers to crash the application by overwriting the Structured Exception Handler (SEH), which is a mechanism for handling software and hardware exceptions. Attackers can trigger an application crash and corrupt the SEH chain by generating a malicious payload of 2196 bytes containing specific byte patterns. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SprintWork version 2.3.1 **Description** SprintWork 2.3.1 contains multiple local privilege escalation issues due to insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain complete system access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Parallaxis Cuckoo Clock version 5.0 **Description** The software contains a buffer overflow issue in the alarm scheduling feature. An attacker can execute arbitrary code by overwriting memory registers, specifically EIP and EBP, with a malicious payload exceeding 260 bytes. This can lead to shellcode execution and potential remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:Program FilesDisk Savvy Enterprisebindisksvs.exe' to inject malicious executables and escalate privileges.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise version 12.4.18 **Description** Sync Breeze Enterprise 12.4.18 contains an unquoted service path that could allow local attackers to execute arbitrary code with elevated system privileges. The issue arises from an unquoted binary path, enabling attackers to place malicious executables in specific file system locations and hijack the service startup process. **Recommendations** Ensure the service path is properly quoted to prevent the execution of unauthorized code.

Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.

**Name of the Vulnerable Software and Affected Versions** BOOTP versions 2.0.1214 **Description** BOOTP Turbo 2.0.1214 contains an unquoted service path issue. This allows local attackers to potentially execute arbitrary code with elevated system privileges. The issue stems from an unquoted executable path, enabling attackers to inject malicious code that runs when the service starts with LocalSystem permissions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DHCP Turbo version 4.61298 **Description** DHCP Turbo version 4.61298 contains an unquoted service path that could allow local attackers to execute arbitrary code. An attacker can place malicious executables in the service path, potentially gaining elevated privileges when the service starts. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TFTP Turbo version 4.6.1273 **Description** TFTP Turbo 4.6.1273 contains an unquoted service path issue that could allow local attackers to execute arbitrary code with elevated privileges. The issue stems from an unquoted path within the service configuration, which allows attackers to inject malicious executables. These injected executables can then be launched with LocalSystem permissions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Atomic Alarm Clock version 6.3 **Description** Atomic Alarm Clock version 6.3 contains a local privilege escalation issue in its service configuration. This allows attackers to execute arbitrary code with SYSTEM privileges. The issue stems from an unquoted service path, enabling exploitation by placing a malicious executable named `Program.exe`. Successful exploitation grants persistent system-level access. **Recommendations** Ensure the service path is properly quoted to prevent the execution of unauthorized programs.

**Name of the Vulnerable Software and Affected Versions** GetSimple CMS Multi User plugin version 1.8.2 **Description** A Cross-Site Request Forgery (CSRF) issue allows remote attackers to add admin or other users after an authenticated admin visits a third-party site or clicks on a URL. This occurs because the plugin fails to properly validate requests, enabling attackers to perform unauthorized actions. **Recommendations** For GetSimple CMS Multi User plugin version 1.8.2, consider disabling the plugin until a patch is available to prevent exploitation of this issue. Restrict access to admin panels and ensure that all administrators are cautious when clicking on external links or visiting third-party sites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Project Worlds Car Rental Management System version 1.0 **Description** The issue allows attackers to upload arbitrary files, potentially leading to remote code execution. This is due to a flaw in the Vehicle Image Upload component. **Recommendations** For Project Worlds Car Rental Management System version 1.0, consider disabling the Vehicle Image Upload component until a patch is available to prevent exploitation. Restrict access to this component to minimize the risk of remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Stock Management System version 1.0 **Description** A SQL injection issue in the login component allows a remote attacker to execute arbitrary SQL commands via the `username` parameter. **Recommendations** For Stock Management System version 1.0, avoid using the `username` parameter in the login component until the issue is resolved. Consider temporarily restricting access to the login functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Daily Tracker System version 1.0 **Description** A Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `fullname` parameter in the "user-profile.php" file. **Recommendations** For SourceCodester Daily Tracker System version 1.0, avoid using the `fullname` parameter in the vulnerable "user-profile.php" file until a fix is available. Consider validating and sanitizing user input to prevent arbitrary script injection.

**Name of the Vulnerable Software and Affected Versions** BarracudaDrive version 6.5 **Description** The issue concerns insecure service file permissions in the bd service, allowing local attackers to escalate privileges to admin. This can be achieved by replacing the `%SYSTEMDRIVE%bdbd.exe` file. Upon the computer's next start, the new bd.exe will be executed with LocalSystem privileges. **Recommendations** For BarracudaDrive version 6.5, ensure proper file permissions are set for the bd service to prevent unauthorized access and modification of the `%SYSTEMDRIVE%bdbd.exe` file. As a temporary workaround, consider restricting write access to the `%SYSTEMDRIVE%bd` directory to minimize the risk of exploitation.