Kunlun

**Name of the Vulnerable Software and Affected Versions** svaarala duktape versions prior to 3.0.0 **Description** A memory corruption issue exists in the processing of the file `duk api bytecode.c`. Local access is required to manipulate the `count instr` argument to trigger this condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shenzhen Libituo Technology LBT-T300-HW1 versions prior to 1.2.9 **Description** A buffer overflow can be triggered remotely via the manipulation of the `Channel/ApCliSsid` argument. This issue occurs within the `start lan()` function of the '/apply.cgi' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shenzhen Libituo Technology LBT-T300-HW1 versions prior to 1.2.8 **Description** A buffer overflow exists in the Web Management Interface component. A remote attacker can trigger this issue by manipulating the `vpn pptp server` or `vpn l2tp server` arguments within the `start single service()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** H3C Magic B1 versions prior to 100R004 **Description** A buffer overflow occurs in the `SetMobileAPInfoById()` function within the '/goform/aspForm' file. This issue is triggered by the manipulation of the `param` argument, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1250GW versions through 3.2.7-210907-180535 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/setSysAdm` file. Manipulation of the `GroupName` argument can trigger this issue, allowing for remote exploitation. A public exploit is available. **Recommendations** Versions prior to 3.2.7-210907-180535 should be updated. As a temporary workaround, consider restricting access to the `/goform/setSysAdm` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** itsourcecode College Management System version 1.0 **Description** A flaw exists in itsourcecode College Management System version 1.0 that allows for remote SQL injection. The issue is located in the `/admin/search student.php` file, specifically through manipulation of the `Search` argument within an unknown function. The exploit for this issue has been publicly disclosed. **Recommendations** Apply any available updates or patches for itsourcecode College Management System version 1.0. As a temporary workaround, consider restricting access to the `/admin/search student.php` file or carefully validating the `Search` parameter to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1200GW versions through 2.5.3-170306 **Description** A buffer overflow issue exists in UTT HiPER 1200GW. The issue is related to the `strcpy` function within the `/goform/websHostFilter` file. This manipulation can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** Versions through 2.5.3-170306 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Art Gallery Shop version 1.0 **Description** A security flaw exists in projectworlds Online Art Gallery Shop. This issue involves a SQL injection impacting an unknown functionality accessible through the file '/?pass=1'. The `fnm` argument is susceptible to manipulation, allowing for potential remote attacks. The exploit for this issue has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Art Gallery Shop version 1.0 **Description** A security issue exists in projectworlds Online Art Gallery Shop 1.0. The vulnerability involves SQL injection within the `/admin/adminHome.php` file. Manipulation of the `reach nm` argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ProjectWorlds Online Art Gallery Shop version 1.0 **Description** A SQL injection issue exists in the software due to manipulation of the `Info` argument within the file '/admin/adminHome.php'. Remote exploitation is possible. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.