Michael Thumann

**Name of the Vulnerable Software and Affected Versions** PrivateWire VPN software versions up to 3.7 **Description** The issue is related to a buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software. This allows remote attackers to execute arbitrary code via a long GET request to the '/api/registration' endpoint, although the specific endpoint is not mentioned, the general concept of a long GET request is noted. **Recommendations** For versions up to 3.7, update to a version that contains a fix for this issue, however, the specific fixed version is not provided in the input data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PMSoftware Simple Web Server version 1.0 **Description** The issue allows remote attackers to execute arbitrary code via a long GET request, specifically due to a buffer overflow. **Recommendations** For PMSoftware Simple Web Server version 1.0, update to a newer version that contains a fix for this issue.