Jasperla

**Name of the Vulnerable Software and Affected Versions** Deluge Web-UI (affected versions not specified) **Description** The issue arises from the improper sanitization of data from torrent files, which is interpreted directly as HTML. This allows an attacker to execute arbitrary Javascript code in the context of the user's browser session by supplying a malicious torrent file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR GS108Tv2 versions prior to 5.4.2.36 NETGEAR GS110TPP versions prior to 7.0.7.2 NETGEAR GS110TPv2 versions prior to 5.4.2.36 NETGEAR GS110TPv3 versions prior to 7.0.7.2 NETGEAR GS308T versions prior to 1.0.3.2 NETGEAR GS310TP versions prior to 1.0.3.2 NETGEAR GS724TPP versions prior to 2.0.6.3 NETGEAR GS724TPv2 versions prior to 2.0.6.3 NETGEAR GS728TPPv2 versions prior to 6.0.8.2 NETGEAR GS728TPv2 versions prior to 6.0.8.2 NETGEAR GS752TPP versions prior to 6.0.8.2 NETGEAR GS752TPv2 versions prior to 6.0.8.2 NETGEAR MS510TXM versions prior to 1.0.4.2 NETGEAR MS510TXUP versions prior to 1.0.4.2 **Description** The issue is related to command injection by an authenticated user due to the lack of input data sanitization in the embedded software of certain NETGEAR devices. This allows a remote attacker to execute arbitrary commands. **Recommendations** For NETGEAR GS108Tv2 version prior to 5.4.2.36, update to version 5.4.2.36 or later. For NETGEAR GS110TPP version prior to 7.0.7.2, update to version 7.0.7.2 or later. For NETGEAR GS110TPv2 version prior to 5.4.2.36, update to version 5.4.2.36 or later. For NETGEAR GS110TPv3 version prior to 7.0.7.2, update to version 7.0.7.2 or later. For NETGEAR GS308T version prior to 1.0.3.2, update to version 1.0.3.2 or later. For NETGEAR GS310TP version prior to 1.0.3.2, update to version 1.0.3.2 or later. For NETGEAR GS724TPP version prior to 2.0.6.3, update to version 2.0.6.3 or later. For NETGEAR GS724TPv2 version prior to 2.0.6.3, update to version 2.0.6.3 or later. For NETGEAR GS728TPPv2 version prior to 6.0.8.2, update to version 6.0.8.2 or later. For NETGEAR GS728TPv2 version prior to 6.0.8.2, update to version 6.0.8.2 or later. For NETGEAR GS752TPP version prior to 6.0.8.2, update to version 6.0.8.2 or later. For NETGEAR GS752TPv2 version prior to 6.0.8.2, update to version 6.0.8.2 or later. For NETGEAR MS510TXM version prior to 1.0.4.2, update to version 1.0.4.2 or later. For NETGEAR MS510TXUP version prior to 1.0.4.2, update to version 1.0.4.2 or later.

Name of the Vulnerable Software and Affected Versions: sthttpd versions prior to 2.27.1 Description: An issue in the de dotdot function can cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy when the strcpy function is implemented with memcpy. This can be triggered with an HTTP GET request for a crafted filename. Recommendations: For versions prior to 2.27.1, update to version 2.27.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the de dotdot function to minimize the risk of exploitation.