Gurbanli

**Name of the Vulnerable Software and Affected Versions** Remote Desktop Audit version 2.3.0.157 **Description** A buffer overflow allows attackers to execute arbitrary code during the Add Computers Wizard file import process. By crafting a malicious payload file, an attacker can trigger a structured exception handler (SEH) bypass—a technique used to circumvent security protections during error handling—and execute shellcode when importing computer lists. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LanSend version 3.2 **Description** A buffer overflow exists in the Add Computers Wizard file import functionality. Remote attackers can use a specially crafted payload file to trigger a structured exception handler (SEH) overwrite, which is a method of hijacking the program's error-handling mechanism, allowing for the execution of arbitrary shellcode during the process of importing computers from a file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sellacious eCommerce version 4.6 **Description** Sellacious eCommerce 4.6 contains a persistent cross-site scripting issue in the Manage Your Addresses module. This allows attackers to inject malicious scripts into multiple address input fields, including full name, company, and address. Successful exploitation can lead to the execution of persistent script code, potentially enabling attackers to hijack user sessions and manipulate application modules. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.