F10Wers13Eicheng

Name of the Vulnerable Software and Affected Versions: Apache HertzBeat versions through 1.7.2 Description: This issue involves an improper neutralization of special elements used in an LDAP query, specifically an LDAP injection flaw, in Apache HertzBeat. An attacker requires an authenticated account with access to trigger the issue by crafting custom commands. A successful attack could lead to arbitrary script execution. Recommendations: Upgrade to version 1.7.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** opensolon Solon versions up to 3.0.8 **Description** A vulnerability was found in the Solon Web Static Files component, affecting the file `StaticMappings.java`. The manipulation leads to path traversal, allowing an attacker to access files outside the intended directory using '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For opensolon Solon versions up to 3.0.8, upgrade to version 3.0.9 to address this issue. As a temporary workaround, consider restricting access to the vulnerable `StaticMappings.java` file until the patch is applied.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Gym Management System (affected versions not specified) **Description** A critical issue has been found in the SourceCodester Gym Management System, affecting the file login.php. The manipulation of the `user email` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** laravel version 5.1 **Description** A problematic issue was found, affecting some unknown processing, which leads to deserialization when manipulated. The attack can be initiated remotely. **Recommendations** For laravel version 5.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.