Guilhem Rioux

**Name of the Vulnerable Software and Affected Versions** EyesOfNetwork (EON) versions 5.3.11 and earlier **Description** An issue in EyesOfNetwork allows privilege escalation on the server because nmap can be run as root, giving the attacker total control over the server. **Recommendations** For EyesOfNetwork (EON) versions 5.3.11 and earlier, consider restricting the execution of nmap to prevent privilege escalation until a patch is available. As a temporary workaround, limit the privileges of the user running nmap to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Geomatika IsiGeo Web version 6.0 **Description** An issue was discovered that allows remote authenticated users to execute commands. **Recommendations** For Geomatika IsiGeo Web version 6.0, consider restricting access to sensitive areas of the application to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jorani version 1.0.0 **Description** The issue is related to a path traversal vulnerability that allows an attacker to access files and execute code on the server. This can be leveraged by an attacker to access sensitive information. Approximately 2,385 results are affected, according to available data. **Recommendations** For Jorani version 1.0.0, as a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.