Eaea0001

**Name of the Vulnerable Software and Affected Versions** SNMP4J-Agent version 3.8.3 **Description** A remote attacker can execute arbitrary code through the `snmp4jCfgStoragePath` component. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** remotion version 4.0.409 **Description** A remote code execution (RCE) issue was discovered, which allows an attacker to execute arbitrary code on the target system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** remotion version 4.0.409 **Description** An arbitrary file write issue exists, allowing an attacker to write files to an unintended location on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.5.5 **Description** The `/api/file/getFile` endpoint uses case-sensitive string equality checks to block access to sensitive files. On case-insensitive file systems, such as Windows, attackers can bypass these restrictions using mixed-case paths and read protected configuration files. This can lead to the disclosure of sensitive information, including access codes, API Tokens, and sync configurations. The issue is remotely exploitable when the service is published without authentication. The root cause is path comparison using strict case-sensitive string matching without case normalization or identical file validation. The vulnerable parameter is `path` in the request to the `/api/file/getFile` endpoint. **Recommendations** Versions prior to 3.5.5 should be updated to version 3.5.5 or later. Normalize path casing before comparison on Windows and macOS. Use file-level comparison methods such as `os.SameFile`. Apply blacklist validation on sensitive paths after case normalization.