Cyber-Wo0Dy

**Name of the Vulnerable Software and Affected Versions** Flos Freeware Notepad2 versions 4.2.22 through 4.2.25 **Description** A security flaw exists in Flos Freeware Notepad2. The issue involves an uncontrolled search path within an unknown function in the `Msimg32.dll` library. Local access is required for exploitation, and the exploitability is considered difficult. **Recommendations** Update Flos Freeware Notepad2 to a version newer than 4.2.25.

**Name of the Vulnerable Software and Affected Versions** Total VPN version 0.5.29.0 **Description** A security issue exists in Total VPN 0.5.29.0 on Windows related to an unquoted search path within the file `C:Program FilesTotal VPNwin-service.exe`. This can lead to potential local privilege escalation. The exploitation of this issue is considered difficult and requires high complexity. The vendor was contacted regarding this issue but did not provide a response. **Recommendations** Review directory permissions for the affected file. Monitor the system closely for any suspicious activity.

Name of the Vulnerable Software and Affected Versions: juzaweb CMS version 3.4.2 Description: A critical vulnerability was found in juzaweb CMS, affecting an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Recommendations: For juzaweb CMS version 3.4.2, as a temporary workaround, consider restricting access to the /admin-cp/theme/install file until a patch is available. Avoid using the Add New Themes Page component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: juzaweb CMS version 3.4.2 Description: A critical vulnerability has been found in juzaweb CMS, affecting an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Recommendations: As a temporary workaround, consider restricting access to the /admin-cp/imports functionality until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical issue affects the Media Page component, specifically the file /admin-cp/media, leading to improper access controls. The attack can be initiated remotely. The vendor was contacted about the disclosure but did not respond. **Recommendations** For versions up to 3.4.2, as a temporary workaround, consider restricting access to the /admin-cp/media file of the Media Page component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical issue was found in the juzaweb CMS, affecting an unknown functionality of the file /admin-cp/menus of the component Menu Page. This leads to improper access controls, allowing remote attacks. The exploit has been publicly disclosed. **Recommendations** For juzaweb CMS versions up to 3.4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical issue affects some unknown functionality of the file `/admin-cp/permalinks` of the component Permalinks Page, leading to improper access controls. The attack may be launched remotely. **Recommendations** For juzaweb CMS versions up to 3.4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical issue has been discovered, affecting an unknown part of the file `/admin-cp/log-viewer` of the component Error Logs Page. This leads to improper access controls, allowing for remote attacks. The issue has been publicly disclosed. **Recommendations** For juzaweb CMS versions up to 3.4.2, update to a version later than 3.4.2 to resolve the issue. As a temporary workaround, consider restricting access to the `/admin-cp/log-viewer` endpoint until a patch is available.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical issue was found in the Plugins Page component, specifically affecting the /admin-cp/plugin/install file. This leads to improper access controls, allowing for remote attacks. The issue has been publicly disclosed, and the vendor was notified but did not respond. **Recommendations** For juzaweb CMS versions up to 3.4.2, consider restricting access to the /admin-cp/plugin/install file until a fix is available. As a temporary workaround, review and tighten access controls to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical issue was found in the Theme Editor Page component of juzaweb CMS, specifically in the file /admin-cp/theme/editor/default, affecting an unknown function. This issue leads to improper access controls, allowing for remote attacks. The exploit has been publicly disclosed. **Recommendations** For juzaweb CMS versions up to 3.4.2, as a temporary workaround, consider restricting access to the Theme Editor Page until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A problematic vulnerability was found in the Profile Page component of juzaweb CMS, specifically in the /admin-cp/file-manager/upload file. The issue is related to the manipulation of the `Upload` argument, which leads to cross-site scripting. This can be exploited remotely. The exploit has been publicly disclosed. **Recommendations** For juzaweb CMS versions up to 3.4.2, as a temporary workaround, consider restricting access to the /admin-cp/file-manager/upload file until a patch is available. Avoid using the `Upload` argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A problematic issue was found in juzaweb CMS, affecting an unknown part of the file `/admin-cp/logs/email` of the component Email Logs Page. This leads to improper access controls and can be initiated remotely. The issue has been publicly disclosed. **Recommendations** For juzaweb CMS versions up to 3.4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** juzaweb CMS versions up to 3.4.2 **Description** A critical vulnerability has been found in the General Setting Page component of juzaweb CMS, affecting unknown code of the file /admin-cp/setting/system/general. This vulnerability leads to improper access controls and can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For juzaweb CMS versions up to 3.4.2, as a temporary workaround, consider restricting access to the /admin-cp/setting/system/general file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Catalyst User Key Authentication Plugin version 20220819 **Description** A vulnerability was found in the Catalyst User Key Authentication Plugin on Moodle, affecting an unknown functionality of the file /auth/userkey/logout.php of the component Logout. The manipulation of the `return` argument leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For Catalyst User Key Authentication Plugin version 20220819, as a temporary workaround, consider restricting access to the `/auth/userkey/logout.php` endpoint until a patch is available. Avoid using the `return` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Winter CMS versions prior to 1.2.4 **Description** The issue allows users with the `media.manage media` permission to upload files to the Media Manager and rename them after uploading, potentially leading to a stored XSS attack. This is because media manager files were only sanitized on upload, not on renaming. The severity of this issue is considered low, as an attacker would already need to have trusted permissions in the Winter CMS backend and would need to convince the victim to directly visit the URL of the maliciously uploaded SVG. Additionally, the application would have to be using local storage where uploaded files are served under the same domain as the application itself instead of a CDN. **Recommendations** For versions prior to 1.2.4, update to version 1.2.4 to ensure the system remains secure. As a temporary workaround for users unable to upgrade to v1.2.4, apply the patches manually from https://github.com/wintercms/winter/commit/2969daeea8dee64d292dbaa3778ea251e2a7e491.

**Name of the Vulnerable Software and Affected Versions** Statamic CMS versions prior to 3.4.15 and 4.36.0 **Description** The issue allows HTML files crafted to look like images to be uploaded, bypassing mime validation. This is applicable on front-end forms using the "Forms" feature with an assets field, or within the control panel, which requires authentication. **Recommendations** For versions prior to 3.4.15, update to version 3.4.15 or later. For versions prior to 4.36.0, update to version 4.36.0 or later. As a temporary workaround, consider restricting access to the "Forms" feature and the control panel to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Statmic versions prior to 3.4.13 Statmic versions prior to 4.33.0 **Description** The issue allows PHP files crafted to look like images to be uploaded on front-end forms with an asset upload field, bypassing mime validation rules. This affects forms using the "Forms" feature, but not arbitrary forms, and does not impact the control panel. **Recommendations** For versions prior to 3.4.13, update to version 3.4.13 or later. For versions prior to 4.33.0, update to version 4.33.0 or later.