Lucas Yang

**Name of the Vulnerable Software and Affected Versions** Multisuns EasyLog web+ (affected versions not specified) **Description** The issue is related to incorrect code generation management in the software. It allows an unauthenticated remote attacker to exploit the code injection vulnerability, enabling them to inject code and access the system. This access can be used to perform arbitrary system operations or disrupt service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Multisuns EasyLog web+ (affected versions not specified) **Description** The issue is related to the use of hard-coded credentials in Multisuns EasyLog web+. A remote attacker can exploit this to access the system, perform arbitrary system operations, or disrupt service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Multisuns EasyLog web+ (affected versions not specified) **Description** The issue is related to a path traversal vulnerability within a specific parameter in a URL. This allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hitron Technologies CODA-5310 (affected versions not specified) **Description** The issue is related to the Telnet function in the Hitron Technologies CODA-5310, which uses a default account and password without prompting users to change them. This allows an unauthenticated remote attacker to exploit the weakness in the authentication procedure, potentially gaining administrator privileges. As a result, the attacker can perform arbitrary system operations or disrupt the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hitron Technologies CODA-5310 (affected versions not specified) **Description** The issue concerns the Telnet function of the Hitron Technologies CODA-5310, which transfers sensitive data in plaintext. This allows an unauthenticated remote attacker to exploit the vulnerability and access the credentials of both normal users and administrators. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hitron Technologies CODA-5310 (affected versions not specified) **Description** The issue is related to insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface. This can result in the attacker performing arbitrary system operations or disrupting the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Moxa MiiNePort E1 (affected versions not specified) **Description** The issue is related to insufficient access control, allowing an unauthenticated remote user to exploit the vulnerability and perform arbitrary system operations or disrupt service. This can enable a remote attacker to access the system configuration interface to view, modify, or terminate services. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Le-yan Personnel and Salary Management System (affected versions not specified) **Description** The issue concerns hard-coded database account and password within the website source code. This allows an unauthenticated remote attacker to access, modify system data, or disrupt the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Draytek VigorAP910C (affected versions not specified) **Description** The issue concerns a vulnerable SNMP in Draytek VigorAP910C that cannot be disabled, potentially leading to information leakage. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.