Lakshay12311

**Name of the Vulnerable Software and Affected Versions** Page-Replica Page Replica versions prior to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0 **Description** A server-side request forgery (SSRF) issue exists in the `sitemap.fetch` function within the `/sitemap` file of the Endpoint component. Manipulation of the `url` argument can lead to server-side request forgery. The attack can be carried out remotely, and a public exploit is available. The product utilizes a rolling release strategy, making specific version details for affected or updated releases unavailable. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** Versions prior to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** yued-fe LuLu UI versions up to 3.0.0 **Description** A security flaw exists in yued-fe LuLu UI, specifically in the `child process.exec` function within the `run.js` file. This allows for operating system command injection, and the attack can be initiated remotely. The vendor was contacted regarding this issue but did not provide a response. **Recommendations** Versions prior to 3.0.1 should be updated. Consider temporarily restricting or disabling the use of the `child process.exec` function in the `run.js` file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** vichan-devel versions up to 5.1.5 **Description** A flaw exists in vichan-devel that allows for unverified password changes. This issue is located in the Password Change Handler component, specifically within the `inc/mod/pages.php` file. The `Password` argument can be manipulated to trigger the issue, enabling attackers to change passwords without proper verification. This attack can be carried out remotely. The vendor was notified but did not respond. **Recommendations** Update vichan-devel to a version beyond 5.1.5.

**Name of the Vulnerable Software and Affected Versions** Great Developers Certificate Generation System (affected versions not specified) **Description** A security issue exists in Great Developers Certificate Generation System. The issue involves unrestricted upload due to manipulation of the file `/restructured/csv.php`. Remote exploitation is possible. The project’s code repository has been inactive for several years and follows a rolling release approach, meaning specific version details for affected or updated releases are not provided. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Great Developers Certificate Generation System versions prior to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73 **Description** A flaw exists in Great Developers Certificate Generation System that allows for operating system command injection. The issue is located in unknown code within the `/restructured/csv.php` file. The `photo` argument can be manipulated to trigger this flaw, enabling remote execution of commands. The project's code repository has been inactive for a significant period. **Recommendations** Update to version 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73 or a later version.

**Name of the Vulnerable Software and Affected Versions** MediaCrush versions 1.0.0 through 1.0.1 **Description** A flaw exists in MediaCrush that involves improper neutralization of HTTP headers for scripting syntax. This issue is located within an unknown function of the `/mediacrush/paths.py` file, part of the Header Handler component. Manipulation of the `Host` argument can be leveraged to exploit this issue remotely. **Recommendations** MediaCrush version 1.0.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. MediaCrush version 1.0.1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** lKinderBueno Streamity Xtream IPTV Player versions up to 2.8 **Description** A server-side request forgery condition exists in lKinderBueno Streamity Xtream IPTV Player versions up to 2.8. The issue is located in an unknown function within the `public/proxy.php` file. This allows for remote manipulation. The exploit has been publicly released. **Recommendations** Upgrade to version 2.8.1 to resolve this issue.

**Name of the Vulnerable Software and Affected Versions** Muse Group MuseHub version 2.1.0.1567 **Description** A security flaw exists in Muse Group MuseHub. The issue involves an unquoted search path within the file C:Program FilesWindowsAppsMuse.MuseHub 2.1.0.1567 x64 rb9pth70m6nz6Muse.Updater.exe, specifically within a component of the Windows Service. Exploitation requires local access and is considered difficult due to a high complexity level. The vendor was contacted regarding this disclosure but did not provide a response. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jameschz Hush Framework version 2.0 **Description** A flaw exists in the HTTP Host Header Handler component of jameschz Hush Framework 2.0, specifically within the file `Hushhush-libhushUtil.php`. Improper neutralization of http headers for scripting syntax occurs due to manipulation of the `$ SERVER['HOST']` argument within an unknown function. This issue can be exploited remotely. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sonarr version 4.0.15.2940 **Description** A security issue exists in Sonarr that involves incorrect default permissions. The issue is related to an unknown function within the file `C:ProgramDataSonarrbinSonarr.Console.exe` of the Service component. Exploitation requires local access. The vendor classifies this as a low severity issue because exploitation would require either changing the service to a highly privileged account or an attacker possessing administrative privileges. **Recommendations** Update to Sonarr version 5 or later.

**Name of the Vulnerable Software and Affected Versions** Radarr version 5.28.0.10274 **Description** A security issue exists in Radarr version 5.28.0.10274 related to incorrect default permissions. This issue stems from manipulation of an unknown function within the file `C:ProgramDataRadarrbinRadarr.Console.exe` of the Service component. The attack can only be carried out locally. The vendor was informed of this issue but did not provide a response. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Survey Application System version 1.0 **Description** A security issue exists in SourceCodester Survey Application System 1.0. The issue involves potential SQL injection through manipulation of the `ID` argument in the `/view survey.php` file. This can be exploited remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Survey Application System version 1.0 **Description** A flaw exists in the SourceCodester Survey Application System that allows for SQL injection. This occurs through manipulation of the `fullname` argument within the `save user/update user` function located in the `/LoginRegistration.php` file. The attack can be performed remotely. The exploit has been published. Other parameters may also be affected. **Recommendations** Apply any available updates to address the SQL injection issue in the `save user/update user` function of the `/LoginRegistration.php` file. As a temporary workaround, restrict or sanitize the `fullname` argument to prevent SQL injection attacks. Review and sanitize all other parameters used in the `save user/update user` function to mitigate potential vulnerabilities.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Job Search Engine version 1.0 **Description** A SQL injection issue exists in code-projects Online Job Search Engine version 1.0. The issue affects an unknown function within the `/login.php` file. Manipulation of the `username/phone` argument can lead to SQL injection, allowing for remote exploitation. The exploit is publicly available. **Recommendations** code-projects Online Job Search Engine version 1.0: As a temporary workaround, consider restricting access to the `/login.php` file until a patch is available. Avoid using the `username/phone` parameter in the login process until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** VeePN versions up to 1.6.2 **Description** A weakness exists in VeePN related to an unquoted search path within the AVService component. The issue affects the file `C:Program Files (x86)VeePNavserviceavservice.exe` and an unknown function within it. Exploitation requires local access and is considered difficult due to the high complexity involved. The vendor was notified of this issue but did not respond. **Recommendations** Versions prior to 1.6.2 are recommended to be updated.

**Name of the Vulnerable Software and Affected Versions** Hasleo Backup Suite versions prior to 5.3 **Description** A weakness exists in Hasleo Backup Suite up to version 5.2, specifically within the `HasleoImageMountService/HasleoBackupSuiteService` component. This issue stems from an unquoted search path, allowing for potential local exploitation. The exploitability is considered difficult, and the exploit has been publicly released. The issue impacts an unknown `function` within the component. **Recommendations** Upgrade the affected component to a version prior to 5.3.

**Name of the Vulnerable Software and Affected Versions** NucleoidAI Nucleoid versions up to 0.7.10 **Description** A flaw exists in NucleoidAI Nucleoid that allows for server-side request forgery. This issue is related to the `extension.apply` function within the `/src/cluster.ts` file of the Outbound Request Handler component. Manipulation of the `https/ip/port/path/headers` argument can trigger the flaw. The attack can be performed remotely. **Recommendations** Update NucleoidAI Nucleoid to a version newer than 0.7.10.

**Name of the Vulnerable Software and Affected Versions** code-projects E-Banking System version 1.0 **Description** A security issue exists in the E-Banking System. The flaw is located within the `/register.php` script, which handles POST requests. Manipulation of the `username` or `password` parameters can lead to SQL injection. The attack can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Hospital Management System version 1.0 **Description** A flaw exists in the session function of the express-session component in code-projects Hospital Management System version 1.0. This issue involves manipulation of the `secret` argument, leading to the use of a hard-coded cryptographic key. The attack can be initiated remotely and is considered to have high complexity, with difficult exploitability. The exploit has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Student Result Manager version 1.0 **Description** A flaw exists in Student Result Manager version 1.0 that allows for remote execution of SQL injection attacks. The issue stems from manipulating the `roll`, `name`, or `gpa` arguments within the `Database.java` file. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.