Mastervlad

**Name of the Vulnerable Software and Affected Versions** Socusoft Photo to Video Converter Professional version 8.07 **Description** A local stack-based buffer overflow exists in the 'Output Folder' input field. An attacker can trigger this issue by pasting a malicious payload into the `Output Folder` field, which may lead to arbitrary code execution via shellcode. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frigate Professional version 3.36.0.9 **Description** A local buffer overflow exists in the Pack File feature. An attacker can execute arbitrary code by overflowing the 'Archive To' input field. This is achieved by crafting a malicious payload that overwrites the Structured Exception Handler (SEH), which is a mechanism for handling software exceptions, and utilizes an egghunter technique, a small piece of code used to find a larger payload in memory, to execute a reverse shell payload. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** docPrint Pro version 8.0 **Description** A local buffer overflow exists in the 'Add URL' input field. This allows attackers to execute arbitrary code by overwriting memory. Specifically, a malicious payload can trigger a structured exception handler (SEH) overwrite—a method of hijacking the program's error-handling mechanism—to execute shellcode and gain remote system access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Flexsense DiskBoss version 7.7.14 **Description** Flexsense DiskBoss 7.7.14 contains a local buffer overflow issue in the 'Reports and Data Directory' field. This allows an attacker to execute arbitrary code on the system. The vulnerable field is the 'Reports and Data Directory' field. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.